#ModGitHub stars

1. 529venv-guardPlagemes/claude-modsBlocks pip install outside an active virtualenv so system Python stays clean.3
2. 530watch-mode-guardPlagemes/claude-modsBlocks watch-mode and never-ending commands run in the foreground, where they'd hang the turn.3
3. 531hw-write-guardaecheman27-gif/claude-modsAsks before Claude runs or writes code that drives hardware: nidaqmx DO/AO writes, pymodbus coil/register writes, pyserial writes, MQTT publishes to printer topics.
4. 532retry-breakeraecheman27-gif/claude-modsWarns (never blocks) when Claude or a subagent keeps retrying the same failing command: a toast and a row above the prompt after 3 identical failures in a row.
5. 533clarifiermako-code/gobworksAsk before guessing: when a prompt looks ambiguous, Claude asks up to three clarifying questions first. Off until /clarify on.2
6. 534clobber-guardmako-code/gobworksStops accidental truncation of real code: no "// ... rest of the code" placeholders over real code, and a question before a Write or Edit throws away most of a file.2
7. 535jev-test-guardmako-code/gobworksCatches tests being weakened to make them pass: every test-file edit is judged by Jev in a few hundred ms against what you asked for.2
8. 536paste-shrinkermako-code/gobworksAsks before sending a huge pasted log, stack trace, JSON or CSV: shrink it to a digest (head, tail, error lines) and save the full text under .claude/pastes, or send it as is.2
9. 537path-guardmako-code/gobworksProtected files and a project boundary: Claude can't edit .env, keys or .git, asks before touching lockfiles and migrations, and asks before writing outside the project.2
10. 538permission-coachmako-code/gobworksNotices the commands you keep approving by hand and offers a one-click standing allow rule (never for risky or interpreter-wide commands).2
11. 539project-primermako-code/gobworksStarts every conversation oriented: one context block with the repo, branch, layout, stack and its build/test/lint/run commands, README summary and recent commits.2
12. 540readonly-modemako-code/gobworks"Look, don't touch": /readonly on blocks edits and every command that is not provably read-only, and tells Claude to investigate and explain instead.2
13. 541suppress-guardMatheusChiodi/cockpitRefuses an edit that adds a blanket suppression: eslint-disable, @ts-ignore, @ts-nocheck, bare # noqa or # type: ignore1
14. 542alias-import-guardMatheusChiodi/cockpitRefuses deep ../../ imports when tsconfig paths has an alias for the folder, and names the alias to use1
15. 543chmod-guardMatheusChiodi/cockpitBlocks world-writable permissions, recursive chown on root or home, and icacls grants to Everyone1
16. 544client-env-guardMatheusChiodi/cockpitRefuses browser code in Vite and Next.js that reads an env variable the bundler never exposes1
17. 545credential-file-guardMatheusChiodi/cockpitBlocks reading or copying SSH keys, cloud and registry credentials and shell history, with Read and in the shell1
18. 546dev-server-guardMatheusChiodi/cockpitAsks before npm run dev, next dev or vite starts while something already answers on that dev server's port1
19. 547docker-guardMatheusChiodi/cockpitAsks before destructive Docker commands: system prune, volume rm or prune, rm -f, rmi -f and compose down -v1
20. 548dotfile-guardMatheusChiodi/cockpitBlocks edits to your shell and tool profiles: .bashrc, .zshrc, .gitconfig, .ssh/config and the PowerShell profile1
21. 549dup-block-guardMatheusChiodi/cockpitRefuses an edit whose new code repeats a block of 6 or more lines already in the same file1
22. 550dynamic-exec-guardMatheusChiodi/cockpitAsks before an edit adds eval, new Function, innerHTML or a shell command built from a variable1
23. 551env-dump-guardMatheusChiodi/cockpitBlocks dumping the whole environment: bare env, printenv, set and export -p, Get-ChildItem Env:1
24. 552esm-guardMatheusChiodi/cockpitRefuses require, module.exports and __dirname in .js files of a package that declares "type": "module"1
25. 553field-injection-noteMatheusChiodi/cockpitTells Claude when a Java edit adds @Autowired or @Inject on a field instead of the constructor1
26. 554gitignore-guardMatheusChiodi/cockpitAsks before a .gitignore edit drops an entry that protects .env, keys or credentials, or git add -f forces one in1
27. 555head-fileMatheusChiodi/cockpit/head shows the first numbered lines of a project file, and never prints files that hold secrets1
28. 556kill-guardMatheusChiodi/cockpitBlocks broad process kills: kill -1, killall, loose pkill, taskkill on system or wildcard names, Stop-Process -Name *1
29. 557large-write-guardMatheusChiodi/cockpitRefuses a Write over 1,500 lines or 200 KB and asks for the file to be split or generated by a script1
30. 558metro-guardMatheusChiodi/cockpitAsks before expo start or react-native start when a Metro bundler already answers on its port1
31. 559migration-guardMatheusChiodi/cockpitRefuses edits to existing database migrations (Prisma, Rails, Django, Alembic, Flyway); a new file is the fix1
32. 560missing-import-guardMatheusChiodi/cockpitRefuses an edit that imports a package which is neither in package.json nor in node_modules1
33. 561paste-fenceMatheusChiodi/cockpitWraps a pasted block of 6+ lines of code or logs in a code fence before it is sent, leaving your sentences outside1
34. 562persistence-guardMatheusChiodi/cockpitAsks before a command that makes something run on its own later: cron, schtasks, systemd, launchd or a Startup folder1
35. 563prod-guardMatheusChiodi/cockpitRequires your confirmation for deploys, publishes, terraform apply, kubectl and migrations1
36. 564registry-guardMatheusChiodi/cockpitAsks before a command changes where packages come from: npm, pnpm, yarn and pip registry or index settings1
37. 565reread-guardMatheusChiodi/cockpitRefuses reading again a file Claude already read this session when it has not changed, once, with a reason1
38. 566script-guardMatheusChiodi/cockpitRefuses npm run or pnpm run of a script that package.json does not declare and lists the ones it does1
39. 567snapshot-update-guardMatheusChiodi/cockpitAsks before a command rewrites test snapshots: jest -u, vitest -u, --snapshot-update, insta accept1
40. 568test-skip-guardMatheusChiodi/cockpitRefuses an edit that adds a skipped or focused test: .skip, .only, xit, fit, @Ignore, @Disabled, @pytest.mark.skip1
41. 569tree-flood-guardMatheusChiodi/cockpitRefuses an unfiltered find, ls -R or dir /s that would list node_modules, and suggests git ls-files or Glob1
42. 570upload-guardMatheusChiodi/cockpitAsks before a command sends a local file out: curl uploads, wget --post-file, scp or rsync to a host, nc1
43. 571weak-crypto-guardMatheusChiodi/cockpitAsks before an edit hashes passwords with MD5 or SHA-1, makes tokens with Math.random, or picks ECB or an unsigned JWT1
44. 572wrapper-guardMatheusChiodi/cockpitRefuses a global mvn or gradle command when the project ships mvnw or gradlew, so the pinned build tool runs1
45. 573main-guardvincentlauriat/ModsToolsRefuses git pushes to main/master, force pushes, tag creation and GitHub releases unless the person allows them
46. 574doc-sync-guardvincentlauriat/ModsToolsWarns above the prompt when a turn did not update COMMANDS.md, or changed code without updating CHANGES.md
47. 575french-guardvincentlauriat/ModsToolsToasts when the last answer looks English or is French written without accents; /french-guard off|on|status
48. 576secret-shieldvincentlauriat/ModsToolsRefuses Write, Edit and Bash calls that contain secret-looking values (API keys, tokens, private keys)