Claude Code mod
barmkin-mod
Claude Code mods security layer: secret redaction, untrusted-content taint with a Rule-of-Two egress gate, skill inline-shell mediation guard, MCP tool-poisoning guard, skill-content screen, agent-to-agent firewall, and a Jev System One classifier gateway with an explanation surface.
Install
git clone https://github.com/samfrmr/barmkin-mod.git
claude --plugin-dir ./barmkin-mod/.The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.
What it can access
- Reach
- L3Network: network, reads settings, reads mod state, draws
- Sees
- every prompt, compaction, every tool call, /"^mcp__"/ calls, Bash|PowerShell|WebFetch|WebSearch|Monitor|Edit|Write|MultiEdit|NotebookEdit calls, WebFetch|WebSearch calls, Read calls, Skill calls, every skill, subagent spawns
- Draws in
AbovePromptPromptHint- Hooks
session.startprompt.submitsession.compactsession.endtool.describetool.calltool.checkskill.promptprompt.attachmentsession.receivesession.sendagent.spawnui.rendercommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- samfrmr/barmkin-mod
- Folder
.- Author
- samfrmr
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is barmkin-mod?
Claude Code mods security layer: secret redaction, untrusted-content taint with a Rule-of-Two egress gate, skill inline-shell mediation guard, MCP tool-poisoning guard, skill-content screen, agent-to-agent firewall, and a Jev System One classifier gateway with an explanation surface. It is a mod for Claude Code, from samfrmr/barmkin-mod on GitHub.
What can the barmkin-mod mod access?
Its widest reach is "network" (network, reads settings, reads mod state, draws). It sees every prompt, compaction, every tool call, /"^mcp__"/ calls, Bash|PowerShell|WebFetch|WebSearch|Monitor|Edit|Write|MultiEdit|NotebookEdit calls, WebFetch|WebSearch calls, Read calls, Skill calls, every skill, subagent spawns. It draws in AbovePrompt, PromptHint. Like any mod, it runs with your permissions.
How do I install barmkin-mod?
Clone samfrmr/barmkin-mod and start Claude Code with --plugin-dir pointing at the mod's folder (.).
Is barmkin-mod popular?
samfrmr/barmkin-mod has 2 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 31 October 2026.
More guard & safety mods
auto-approve
2llkhacquan/claude-mods
Answers permission prompts for you: regex layers allow routine tool calls and always ask on pushes to protected branches, and haiku judges the rest against your plain-text rules. Offers a rule after you approve the same kind of call twice, and logs every decision so /auto-approve learn can suggest more
c-mods
2C0nanT/conan-mods
Conan's Claude Code mods: caveman prompt, git-guard, dotenv-guard and an end-of-task sound, each toggled with /c-mods.
waiting-bell
3ibrahimkobeissy/claude-mods
Rings a bell and shows a banner whenever Claude is blocked waiting for you, repeating every 5 minutes until you answer
composio-pulse
2tridha643/claude-composio-mods
Times every composio CLI call into a status-line sparkline against a latency budget, and blocks re-linking a connected toolkit
vault
3yocloud-code/claude-vault
Credential vault for Claude Code: macOS Keychain secrets, per-directory grants, injected env, redacted output, pane with import/export
copy-blocks
2y-hirakaw/claude-code-mods
Copy each quote or code block in Claude's answer with one click, from a copy button above each block or a row above the prompt.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.