Safety

• Credential Safety How madtea stores your Forgejo/Gitea token locally and what the “credential-safe git wrappers” claim actually guarantees.
• Safe body edits madtea has no command that overwrites an issue body or pull-request body wholesale.
• Safety hooks The Claude Code plugin installs seven PreToolUse hooks that intercept tool calls before they run — they don’t change git itself, only what the agent is permitted to run.
• Wrong-repo fail-closed guard A repo-scoped MCP tool called without an explicit owner_repo resolves its target repo from the MCP server process’s working directory — not from any cd the agent did.