Claude Code mod
bash-guardrails
Tool-call guard rules (parser-based), written in CEL; add your own in ~/.claude/bash-guardrails.json or .claude/bash-guardrails.json. On by default: blocks malformed bash and find rooted at /. Opt-in: Monitor, find without -xdev, pgrep/pkill pitfalls, until-grep loops, sudo, run0 confirmation, and pointing cat/head/sed/awk, heredoc writes, sed -i and Python rewrites to the Read, Write and Edit tools
Install
git clone https://github.com/ruihe774/cc-bash-guardrails.git
claude --plugin-dir ./cc-bash-guardrails/.The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.
What it can access
- Reach
- L1Reads: reads files, reads env vars, draws
- Sees
- Monitor|Bash calls
- Hooks
session.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- ruihe774/cc-bash-guardrails
- Folder
.- Author
- Rui He
- License
- Unlicense
- Last updated
- 11 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is bash-guardrails?
Tool-call guard rules (parser-based), written in CEL; add your own in ~/.claude/bash-guardrails.json or .claude/bash-guardrails.json. On by default: blocks malformed bash and find rooted at /. Opt-in: Monitor, find without -xdev, pgrep/pkill pitfalls, until-grep loops, sudo, run0 confirmation, and pointing cat/head/sed/awk, heredoc writes, sed -i and Python rewrites to the Read, Write and Edit tools It is a mod for Claude Code, from ruihe774/cc-bash-guardrails on GitHub.
What can the bash-guardrails mod access?
Its widest reach is "reads" (reads files, reads env vars, draws). It sees Monitor|Bash calls. Like any mod, it runs with your permissions.
How do I install bash-guardrails?
Clone ruihe774/cc-bash-guardrails and start Claude Code with --plugin-dir pointing at the mod's folder (.).
More guard & safety mods
hope
38saadshahd/moo.md
Thinking discipline for AI work. Clarify intent, shape approach, consult experts, guard unsupervised work, hand work back so you own it.
collision-guard
68nateherkai/claude-code-mods
Asks before Claude edits a file another open chat changed in the last 30 minutes: Proceed, Move to a worktree, or Cancel (/guard)
vibeship
2wag-me/vibeship
Vibeship: a 3D spaceship where your Claude Code agents work in crew uniforms. Pick the deck, furnish the stations, chat with the agents and approve permissions. Command: /vibeship
blast-guard
1satyamk4517/claude-mods
Holds risky shell commands for a yes/no with a dry-run report, blocks Python heredocs carrying backslash escapes, and caps concurrent subagents at 4.
vanguard
2XXX1694/Vanguard
Command center for Claude Code: a live pane for your squad of subagents, limits and context, an orchestrator that fans work out to specialist agents, bundled MCP servers and skills, and a lifetime profile with levels and achievements.
blocked-run
1Spardutti/claude-mods
When auto mode blocks a command, shows it above the prompt with a button to run it yourself
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.