Claude Code guard & safety mods · page 11

Stop, hold or rewrite risky tool calls, protect secrets and ask before deploys. Most popular first.

576 mods · showing 481–528

Pane & dashboard modsContext & usage modsGit & GitHub modsMemory & instructions modsNotification & sound modsSpinner, theme & fun modsWorkflow modsStatus linesHooksSlash commandsPlugins & marketplacesWorkflow kitsOutput stylesThemes & HUDsNotifications & soundsDesktop, web & mobile appsUsage & cost trackersSessions & historyModel routers & proxiesMulti-agent & worktreesEditor integrationsConfig & memory
  1. 481db-reset-guardbaselane-sh/modsAsks before a framework wipes a database: prisma migrate reset, rails or rake db:drop and db:reset, alembic downgrade, django flush, supabase db reset, knex rollback --all.3
  2. 482deploy-checklistPlagemes/claude-modsShows a pre-deploy checklist (tests, branch, changelog) and asks you to confirm before deploying.3
  3. 483deploy-guardbaselane-sh/modsAsks before a production deploy: vercel --prod, netlify deploy --prod, firebase deploy, fly deploy, gcloud app deploy, eb deploy, heroku rollback, serverless deploy to prod.3
  4. 484disk-guardPlagemes/claude-modsWarns when the disk is nearly full before builds, installs and docker pulls.3
  5. 485docker-guardbaselane-sh/modsAsks before Docker commands that delete data: system, volume or image prune, rm -f, volume rm and compose down -v.3
  6. 486docker-prune-guardPlagemes/claude-modsBlocks docker system prune -a --volumes and volume deletion that can wipe local databases.3
  7. 487env-exfil-guardbaselane-sh/modsAsks before a command prints your environment, echoes a secret variable or sends local data to a remote host.3
  8. 488env-guardPlagemes/claude-modsProtects .env files, SSH keys and credential stores from being read or modified.3
  9. 489force-push-guardPlagemes/claude-modsForbids force-pushing to protected branches and suggests --force-with-lease.3
  10. 490gitignore-guardPlagemes/claude-modsWarns before node_modules, build output, OS junk or huge files get staged.3
  11. 491i18n-guardPlagemes/claude-modsFlags hard-coded user-facing strings in UI components.3
  12. 492infra-guardbaselane-sh/modsAsks before terraform destroy, kubectl delete, force-push, DROP TABLE or rm -rf.3
  13. 493k8s-guardbaselane-sh/modsAsks before kubectl apply or replace with --force, kubectl drain, helm uninstall, and kubectl delete behind global flags (plain kubectl delete is infra-guard's).3
  14. 494lockfile-guardbaselane-sh/modsAsks before a lockfile is written or edited by hand; the package manager should change it.3
  15. 495lockfile-guardPlagemes/claude-modsPrevents hand-editing lockfiles; they must change through the package manager.3
  16. 496migration-guardbaselane-sh/modsAsks before Write or Edit changes a migration that already exists; new migration files pass.3
  17. 497migration-guardPlagemes/claude-modsPrevents editing database migrations that already exist; write a new one instead.3
  18. 498no-skip-testsPlagemes/claude-modsBlocks Claude from silencing tests with .skip, .only, xit or skip markers.3
  19. 499no-uploadPlagemes/claude-modsBlocks commands that upload files to external services like pastebins and file-sharing sites.3
  20. 500no-verify-guardbaselane-sh/modsAsks before git hooks are skipped (--no-verify, commit -n, HUSKY=0, core.hooksPath=/dev/null).3
  21. 501offline-modePlagemes/claude-mods/offline blocks every network call — fetches, curl, installs, git push — until you turn it back on.3
  22. 502package-guardbaselane-sh/modsAsks before a new dependency is installed (npm, pnpm, yarn, bun, pip, uv, poetry, cargo, go, gem) and names the packages.3
  23. 503path-jailbaselane-sh/modsAsks before Write, Edit or NotebookEdit changes a file outside the working directory, by real path.3
  24. 504permission-logPlagemes/claude-modsKeeps a log of every tool call that was denied, and why.3
  25. 505prod-db-guardbaselane-sh/modsAsks before destructive SQL runs in a command: TRUNCATE, DELETE or UPDATE with no WHERE.3
  26. 506protect-mainbaselane-sh/modsAsks before a commit, push or merge while you are on main or master. Reads the branch with git.3
  27. 507publish-guardbaselane-sh/modsAsks before a package is published: npm, pnpm, yarn or bun publish, cargo publish, twine upload, gem push, poetry or uv publish. Dry runs pass.3
  28. 508rate-limit-guardPlagemes/claude-modsStops Claude from hammering external APIs with curl loops.3
  29. 509redactorPlagemes/claude-modsMasks secrets and personal data in tool results before the model ever reads them.3
  30. 510registry-push-guardbaselane-sh/modsAsks before an image or chart is pushed to a registry: docker push, docker buildx --push, podman push, helm push, gcloud artifacts docker push. Local registries pass.3
  31. 511regression-guardPlagemes/claude-modsRemembers which tests passed at the start of the session and warns if any of them now fail.3
  32. 512release-packbaselane-sh/modsAsks before a release leaves your machine: package publish, tag push, production deploy and registry push guards in one mod. The tag guard reads tags with git.3
  33. 513rm-rf-guardPlagemes/claude-modsBlocks catastrophic shell commands like rm -rf /, mkfs, dd to disks and chmod -R 777.3
  34. 514scope-lockPlagemes/claude-mods/scope locks Claude to the files you name; edits outside the scope are blocked.3
  35. 515secret-commit-guardbaselane-sh/modsAsks before a git commit that would record a credential or a secret-named file. Reads the staged diff with git.3
  36. 516secret-filename-guardbaselane-sh/modsAsks before a Bash command touches a secret-looking file (.env, private keys, credentials).3
  37. 517secret-guardbaselane-sh/modsAsks before a live API key, token or private key is written, edited or run.3
  38. 518secret-output-guardbaselane-sh/modsTells Claude not to repeat a credential that showed up in command or file output, and names the source to rotate.3
  39. 519secret-scanbaselane-sh/modsAdds /secret-scan: tracked files and line numbers that hold secret-shaped text, found with git grep. Never prints a matched value. Read-only. Copies the result to your clipboard.3
  40. 520secret-shieldPlagemes/claude-modsBlocks edits and writes that would commit API keys, tokens or private keys.3
  41. 521security-modebaselane-sh/modsChecks each change for injection, secrets, authorization and unsafe input, and states the risks it checked.3
  42. 522seed-guardPlagemes/claude-modsBlocks database seed, reset and drop commands unless DATABASE_URL points at your own machine.3
  43. 523sql-safetyPlagemes/claude-modsFlags UPDATE and DELETE without WHERE in .sql files and in queries inside your code.3
  44. 524sudo-guardbaselane-sh/modsAsks before sudo, doas or su -c runs a command with elevated rights.3
  45. 525tag-guardbaselane-sh/modsAsks before release tags go to a remote: git push --tags, --follow-tags or --mirror, a push of a tag ref, and a push that deletes a remote tag. Dry runs pass. Reads tags with git.3
  46. 526time-badgebaselane-sh/modsTool rows show how long the call ran, for example 2.4s, when it took over one second. The time is the tool's own run time, without permission prompts.3
  47. 527tracker-guardPlagemes/claude-modsBlocks adding analytics and tracking SDKs that haven't been approved.3
  48. 528upload-guardbaselane-sh/modsAsks before local files go to a remote host: scp or rsync to host:path, piped input to nc, curl -T, sftp put. Local copies, downloads and localhost pass.3