Claude Code mod

agent-firewall

A live pane of every tool call the agent makes: green when it ran, red when it was blocked, with counters. Open it with /firewall.

3 starsGuard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add baselane-sh/mods
/plugin install agent-firewall@baselane-mods-dev

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L1Reads: reads mod state, draws
Sees
every tool call
Draws in
Pane
Hooks
session.startcommand.runtool.checktool.callui.render

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
baselane-sh/mods
Folder
plugins/agent-firewall
Marketplace
baselane-mods-dev
Author
Baselane
Type
Guard & safety mods
License
MIT
Last updated
6 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is agent-firewall?

A live pane of every tool call the agent makes: green when it ran, red when it was blocked, with counters. Open it with /firewall. It is a mod for Claude Code, from baselane-sh/mods on GitHub.

What can the agent-firewall mod access?

Its widest reach is "reads" (reads mod state, draws). It sees every tool call. It draws in Pane. Like any mod, it runs with your permissions.

How do I install agent-firewall?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add baselane-sh/mods and then /plugin install agent-firewall@baselane-mods-dev.

Is agent-firewall popular?

baselane-sh/mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 6 October 2026.

More guard & safety mods

bash-guard

2

mako-code/gobworks

Blocks catastrophic shell commands (rm -rf ~, curl | sh, force-push to main, DROP DATABASE, format C:) and asks before risky ones (git reset --hard, rm -rf, terraform apply), in Bash and PowerShell.

Guard & safety mods/plugin install

audit-pack

3

baselane-sh/mods

Three read-only audit commands in one mod: /secret-scan, /conflicts and /licenses. They read git, project files and dependency folders. They copy results to the clipboard.

Guard & safety mods/plugin install

ssh-guard

3

baselane-sh/mods

Asks before a private key in .ssh is read, authorized_keys or the SSH config is changed, or ssh-keygen would overwrite a key. Public keys and ssh -i pass. Reads HOME with printenv.

Guard & safety mods/plugin install

big-file-guard

3

baselane-sh/mods

Asks before a Write creates content over 1 MB, or git add names a file over 5 MB. Measures the files with find.

Guard & safety mods/plugin install

stakes-widget

4

oMaN-Rod/claude-code-widgets

What a yes would lose, measured from git and written under the permission dialog for a destructive command

Guard & safety mods/plugin install

big-read-guard

3

Plagemes/claude-mods

Stops full reads of huge files and nudges toward offset/limit or grep.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.