Claude Code mod

ask-on-auto-deny

When auto mode's classifier blocks a tool call, asks you above the prompt and lets you allow that exact call once

Guard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source

git clone https://github.com/tylergraydev/cc-mods.git
claude --plugin-dir ./cc-mods/ask-on-auto-deny

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach: L2Writes or runs: drives Claude, writes the prompt box, reads the prompt box, reads mod state, draws
Sees: classic hooks, every tool call
Draws in: AbovePrompt
Hooks: session.startsession.endclassic.PermissionDeniedtool.calltool.checkcommand.runui.render

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.

Claude Code docs

Details

Repository: tylergraydev/cc-mods
Folder: ask-on-auto-deny
Author: tylergraydev
Type: Guard & safety mods
Last updated: 12 October 2026
Listed in: awesome-claude-code-mods

FAQ

What is ask-on-auto-deny?

When auto mode's classifier blocks a tool call, asks you above the prompt and lets you allow that exact call once It is a mod for Claude Code, from tylergraydev/cc-mods on GitHub.

What can the ask-on-auto-deny mod access?

Its widest reach is "writes or runs" (drives Claude, writes the prompt box, reads the prompt box, reads mod state, draws). It sees classic hooks, every tool call. It draws in AbovePrompt. Like any mod, it runs with your permissions.

How do I install ask-on-auto-deny?

Clone tylergraydev/cc-mods and start Claude Code with --plugin-dir pointing at the mod's folder (ask-on-auto-deny).

More guard & safety mods

next-guard

Plagemes/claude-mods

Flags missing or needless "use client" and server-only imports leaking into client components in Next.js.

Guard & safety mods/plugin install

flightdeck

aecheman27-gif/claude-mods

Flightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt and a session log, all from real session events

Guard & safety mods/plugin install

guard-pack

baselane-sh/mods

The 15 core Baselane guards in one mod (secrets, git, infra, packages, path jail). Some read git, measure files with find, read HOME with printenv, or check where a path really lands.

Guard & safety mods/plugin install

remote-guard

narrowstacks/claude-code-mods

Asks before a destructive command runs on another machine over ssh (restarts, deletes, kills, reboots)

Guard & safety mods/plugin install

storage-guard

KilimcininKorOglu/claude-code-mods

After an edit that keeps browser data in localStorage or sessionStorage, names each line, so the model stores the data in a cookie instead.

Guard & safety mods/plugin install

env-guard

seanrobertwright/claude-mods

Asks you before Claude reads a .env or key file, and refuses when no one is there to answer.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.