#ModGitHub stars

1. 433edit-undovincentlauriat/ModsToolsSnapshots each file before Claude's Edit/Write/NotebookEdit and lets you undo the last change per file from a pane or /undo <path>, with a two-step confirm
2. 434marcador-sessaoinematds/inema-modsMarcadores de sessão: guarda um ponto da conversa com nome e resumo, e cola o resumo no prompt para retomar (/marcar <nome>, /marcar abrir, /marcar apagar <nome>)
3. 435rulebook-guardthorstenalpers/claude-code-modsWriting and git rules: replaces em dashes in prose, and asks before git commit --amend, an unformatted push, or personal info in notes and commits.
4. 436secret-scrubpradyb/claude-modsCatches API keys, tokens and private keys in the prompt you are about to send, and masks or blocks them before they reach the model.
5. 437zsh-safenarrowstacks/claude-code-modsQuotes glob flags zsh would expand (--include=*.ts) and keeps a grep that finds nothing from failing the command
6. 438mood-ringbaselane-sh/modsA band above the prompt with a colored dot and a word for the error and block rate of your last 20 tool calls: calm (green) under 10 percent, tense (yellow) under 30, stormy (red) from 30.3
7. 439pii-guardschreibse/claude-code-modsAsks before a tool call sends your name or email to a non-local destination3
8. 440prod-guardPlagemes/claude-modsStops production-affecting commands (terraform apply, kubectl on prod, DROP TABLE) unless explicitly allowed.3
9. 441secret-shieldmako-code/gobworksKeeps credentials out of your code, your shell commands and Claude's context: blocks hard-coded secrets in edits, asks before commands with literal keys, redacts secrets from tool results and flags them in prompts.2
10. 442pm-guardnarrowstacks/claude-code-modsSteers npm/npx/yarn to the package manager the repo's lockfile names (bun or pnpm), bun where there is none
11. 443safety-guardpradyb/claude-modsBlocks destructive shell commands and access to secret files (.env, SSH keys, cloud credentials).
12. 444oracle-name-guardMatheusChiodi/cockpitRefuses an edit that creates a table, index, constraint, sequence or trigger named over 30 characters, the Oracle 11g limit1
13. 445right-toolMDmubarak786/claude-modsStop Claude using cat, grep, find, and sed in Bash when the Read, Grep, and Glob tools fit. Each redirected call saves a permission prompt and keeps raw shell output out of context.1
14. 446machine-guardjoeldg/claude-modsMemory, swap, GPU and the CPU cores macOS is using on the status line, and a machine_status tool for Claude; refuses heavy local jobs (training, inference, rendering, Docker) while memory is critical or the Mac is reserved with /busy.2
15. 447watchtowerMDmubarak786/claude-modsOne line above the prompt showing what your guard mods are doing: the fence, pins, the breaker threshold, the test command and its last result, and every call refused this session.1
16. 448diagram-renderKilimcininKorOglu/claude-code-modsRenders the mermaid blocks of the model's replies with an installed mmdc after each turn and draws each picture under its reply.12
17. 449shot-inlineKilimcininKorOglu/claude-code-modsDraws each PNG or JPG the model saves or reads under its tool row: pixels in kitty and Ghostty, quadrant block cells in every other terminal.12
18. 450storage-guardKilimcininKorOglu/claude-code-modsAfter an edit that keeps browser data in localStorage or sessionStorage, names each line, so the model stores the data in a cookie instead.12
19. 451guard-packbaselane-sh/modsThe 15 core Baselane guards in one mod (secrets, git, infra, packages, path jail). Some read git, measure files with find, read HOME with printenv, or check where a path really lands.3
20. 452next-guardPlagemes/claude-modsFlags missing or needless "use client" and server-only imports leaking into client components in Next.js.3
21. 453ask-on-auto-denytylergraydev/cc-modsWhen auto mode's classifier blocks a tool call, asks you above the prompt and lets you allow that exact call once
22. 454flightdeckaecheman27-gif/claude-modsFlightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt and a session log, all from real session events
23. 455remote-guardnarrowstacks/claude-code-modsAsks before a destructive command runs on another machine over ssh (restarts, deletes, kills, reboots)
24. 456env-guardseanrobertwright/claude-modsAsks you before Claude reads a .env or key file, and refuses when no one is there to answer.3
25. 457oracle-paging-guardMatheusChiodi/cockpitRefuses an edit that adds FETCH FIRST, OFFSET ROWS or LIMIT to SQL, which Oracle 11g cannot run, and names the ROWNUM form1
26. 458guardianPlagemes/claude-modsOne security policy for every guard mod — permissive, standard or strict — plus a project safety score.3
27. 459env-protectvincentlauriat/ModsToolsAsks the user before Claude reads secret files (.env, private keys, .netrc, .npmrc, .aws/credentials, keychains…) with Read, Grep, Glob or Bash
28. 460secret-redactoroleksandrkodua/qa-modsMasks API keys, tokens, private keys and password assignments in tool results before the model sees them.
29. 461reply-sizeMatheusChiodi/cockpitUnder a long reply block, shows its word count and how many code blocks it holds, so you can decide whether to read it now1
30. 462debug-flag-guardMatheusChiodi/cockpitAsks before an edit leaves a debug flag on, exposes every actuator endpoint or sets development mode in a production file1
31. 463a11y-guardPlagemes/claude-modsFlags accessibility misses as Claude writes UI: images without alt, unlabeled buttons, clickable divs.3
32. 464crypto-guardPlagemes/claude-modsFlags weak cryptography: MD5 or SHA1 for passwords, Math.random for tokens, ECB mode, hard-coded IVs.3
33. 465ship-safe-packbaselane-sh/modsThe release-pack guards plus db-reset-guard and upload-guard: asks before publish, tag push, production deploy, registry push, database wipes and file uploads. Reads tags with git.3
34. 466guard-widgetoMaN-Rod/claude-code-widgetsA tally of this session's permission checks: what was allowed, what you were asked about and what was denied.4
35. 467map-widgetoMaN-Rod/claude-code-widgetsA pixel map of the repository: every tracked file a block, lit blue where Claude has read and green where it has edited.4
36. 468redact-widgetoMaN-Rod/claude-code-widgetsReplaces API keys, tokens, private keys and passwords in command output and file reads before Claude sees them4
37. 469stakes-widgetoMaN-Rod/claude-code-widgetsWhat a yes would lose, measured from git and written under the permission dialog for a destructive command4
38. 470ssh-guardbaselane-sh/modsAsks before a private key in .ssh is read, authorized_keys or the SSH config is changed, or ssh-keygen would overwrite a key. Public keys and ssh -i pass. Reads HOME with printenv.3
39. 471bash-guardmako-code/gobworksBlocks catastrophic shell commands (rm -rf ~, curl | sh, force-push to main, DROP DATABASE, format C:) and asks before risky ones (git reset --hard, rm -rf, terraform apply), in Bash and PowerShell.2
40. 472agent-firewallbaselane-sh/modsA live pane of every tool call the agent makes: green when it ran, red when it was blocked, with counters. Open it with /firewall.3
41. 473audit-packbaselane-sh/modsThree read-only audit commands in one mod: /secret-scan, /conflicts and /licenses. They read git, project files and dependency folders. They copy results to the clipboard.3
42. 474big-file-guardbaselane-sh/modsAsks before a Write creates content over 1 MB, or git add names a file over 5 MB. Measures the files with find.3
43. 475big-read-guardPlagemes/claude-modsStops full reads of huge files and nudges toward offset/limit or grep.3
44. 476chmod-guardbaselane-sh/modsAsks before chmod makes files world-writable (777, a+w, o+w) or chmod or chown runs recursively on a broad path (/, a system folder, a home folder).3
45. 477copyright-guardPlagemes/claude-modsFlags pasted code that carries someone else's license or copyright header.3
46. 478cron-guardbaselane-sh/modsAsks before scheduled jobs or services are wiped or stopped: crontab -r, crontab replaced from stdin or a file, launchctl unload or bootout, systemctl stop, disable or mask.3
47. 479curl-pipe-guardbaselane-sh/modsAsks before a download is piped into a shell or interpreter (curl | sh, wget -O- | bash, bash <(curl ...)).3
48. 480curl-pipe-guardPlagemes/claude-modsBlocks piping downloaded scripts straight into a shell.3