1. 49tdd-modkoslowskyj/tdd-modBlocks file writes that break Red-Green-Refactor on coding tasks (port of probity's enforceTdd).4
  2. 50workkititw-creative-works/workkitThe issue-pipeline workflow system: standards heal, manager crew, guard hooks, and the workflow skills, for any repo.4
  3. 51leakstopAlexandreMartinezOlmos/claude-code-leakstopStops secrets from leaking before they are written, printed or committed to git.1
  4. 52codecraftmkpvishnu/claude-modsA Minecraft-inspired HUD for Claude Code: hearts for context, armor for safety nets, XP for verified work, and 60 advancements that persist across sessions3
  5. 53devtoolsNMenzel/claude-devtools-modA debugger for Claude Code tool calls: breakpoints, pause/continue/reject/step, a timeline, an inspector, Error Lens failure diagnosis, a Permissions view of who refused each call and why, and sanitized trace exports.3
  6. 54dotclaudeCarloArnone/dotclaudeA workspace pane for Claude Code: vitals rail, edit gate (blocks Edit, Write, NotebookEdit and MultiEdit until you approve; not Bash or MCP tools), plan review, ledger, companion, Mac monitor, notes vault, radar, Git and crew.3
  7. 55installguardgriches/installguardLooks up every new package before it installs: holds made-up names, typosquats, days-old releases and curl-into-shell for your answer, and lets the rest through.3
  8. 56peekalex2481kobe/claude-modsImages in the terminal: Claude shows the pictures it makes or finds inline, as real pixels in kitty and Ghostty and as a colored-block preview elsewhere3
  9. 57receiptyash-gadodia/claude-modsKeeps a per-turn tally of edits, runs, curls and destructive commands and shows it on the turn footer; a claim with no run flags the spinner, a destructive Bash unfolds its tool group, and an edit-without-run turn suggests running the tests.3
  10. 58redact-restoreisandrel/redact-restoreReversible redaction for Claude Code: private values are replaced with placeholders before the model API sees them and restored locally. No API gateway.3
  11. 59secret-guardvumichien/claude-code-mods-kitHides secrets in tool results before Claude reads them: the secret values of every .env and .env.* from your session's folder up to the drive root, and anything that looks like a secret (KEY=VALUE under a secret name, passwords in URLs, private keys, JWTs, AWS keys, Kubernetes Secrets); tells Claude how to use them without printing them3
  12. 60vaultyocloud-code/claude-vaultCredential vault for Claude Code: macOS Keychain secrets, per-directory grants, injected env, redacted output, pane with import/export3
  13. 61waiting-bellibrahimkobeissy/claude-modsRings a bell and shows a banner whenever Claude is blocked waiting for you, repeating every 5 minutes until you answer3
  14. 62auto-approvellkhacquan/claude-modsAnswers permission prompts for you: regex layers allow routine tool calls and always ask on pushes to protected branches, and haiku judges the rest against your plain-text rules. Offers a rule after you approve the same kind of call twice, and logs every decision so /auto-approve learn can suggest more2
  15. 63barmkin-modsamfrmr/barmkin-modClaude Code mods security layer: secret redaction, untrusted-content taint with a Rule-of-Two egress gate, skill inline-shell mediation guard, MCP tool-poisoning guard, skill-content screen, agent-to-agent firewall, and a Jev System One classifier gateway with an explanation surface.2
  16. 64c-modsC0nanT/conan-modsConan's Claude Code mods: caveman prompt, git-guard, dotenv-guard and an end-of-task sound, each toggled with /c-mods.2
  17. 65composio-pulsetridha643/claude-composio-modsTimes every composio CLI call into a status-line sparkline against a latency budget, and blocks re-linking a connected toolkit2
  18. 66copy-blocksy-hirakaw/claude-code-modsCopy each quote or code block in Claude's answer with one click, from a copy button above each block or a row above the prompt.2
  19. 67exopepperonas/exoAn exoskeleton for Claude Code: guards against costly mistakes, a cockpit while working, a recap at the end and a few extras2
  20. 68garde-prodDarkSawOktay/claude-modsProduction guard: flags every command that touches production or is risky (force push, secrets, rm -rf…), checks for a fresh database backup before a production write (can refuse without one), and keeps refused commands ready to run yourself with !. French or English.2
  21. 69goalpost-guardXabilimon1/emcc-claude-code-modsStops Claude from passing a check by lowering the bar: weakened or deleted tests, new suppressions, relaxed config, softened CI, lowered coverage, skipped git hooks.2
  22. 70jev-guardAkeuuh/claude-modsJev gates Bash, Write and Edit, and screens Read and Bash results for injected instructions; a blocked command is held, for the person to run anyway or keep blocked2
  23. 71main-guardShriD5/claude-modsA red band when you are on main or in prod, and no force-push, reset --hard or unconfirmed push to a protected branch2
  24. 72mod5dive-ai/5dive-plugins5dive telemetry producer, seat panel, command surface and tool-call policy guard for Claude Code function hooks (early access). Publishes turn and session boundaries and the account's usage reading from inside the harness process to a per-seat JSONL sink, so the heartbeat, the pacing floor and the self-update's pending-restart sweep can read a first-class signal instead of inferring idle/busy from pane samples and the task board. Registers /task and /gate, which dispatch to the 5dive CLI in-process. It also draws one line above the prompt naming the row the seat holds, its gate, its grader and its token burn against its budget, at zero context cost. On the NON-FRESH seats it can additionally compact the conversation at a turn boundary, so the next dispatched goal lands on a summary instead of the whole accumulated window; that half pins any unanswered human gate or standing directive back into the compacted transcript. And it enforces a table-driven deny list over tool calls (policy/guard.json), so a rule that today costs every seat tokens on every turn and is caught after the fact is refused before the tool runs, with the reason handed to the model. Every capability is off unless the seat opts in; the compact hook is the only one that rewrites a call and the guard is the only one that can refuse one.2
  25. 73modelruddercybrking/modelrudderPer-turn model routing for native Claude Code, with native tools and permissions preserved.2
  26. 74obwmusingfox/cc-pluginsObsidian Workspace — project-scoped vault productivity (capture / notes / PM). Skills own folder layout and templates; /obw:pm splits a spec into blocking tickets; /issue is a Claude Mod pane that lists a view of the project's dashboard, draws Mermaid as text diagrams, and can open a card in the browser through viz. Vault I/O uses the Obsidian CLI via the official obsidian-cli skill.2
  27. 75pii-guarddave-net-positive/Claude_Code_PII_RedactorHolds prompts, @file contents and Read results that contain PII or secrets behind a review pane with per-type allow/redact decisions.2
  28. 76rate-limit-guardsciccolella/claude-ratelimit-modAt 90% of the 5-hour limit, tells the orchestrator and every subagent to checkpoint and stop at a safe point, then resumes them after the window resets.2
  29. 77redactkaranb192/claude-code-redactRedacts secrets and PII from every row Claude Code stores, before the model reads it and before the transcript keeps it. Reach L0: no network, no processes, no files.2
  30. 78secret-dropaislam23/secret-dropSecure input window for API keys and passwords: Claude asks, you type into a masked field, the mod writes .env / GitHub Secrets itself. The value never enters the chat.2
  31. 79shroudrevenantworks/claude-skillsRevenantworks shroud mod for Claude Code 2.1.287+: masks secrets (its own shapes plus the gitleaks rule set), stream keys and, if you turn them on, personal data and your own word list before Claude reads them (restoring a value only into the gitignored file it came from), flags a credential keywarden marked for rotation, and marks web, MCP and mail results and messages from routines or other sessions as data. Kept apart from the vigil plugin, so safety never depends on the dashboard. Never blocks your work; keeps no record; contacts no service.2
  32. 80tamirs-superpowers-guardTamircohen28/tamirs-superpowersIn-process guard for tamirs-superpowers: holds a destructive shell command (force push, rm -rf, git reset --hard, ...) until you answer Proceed or Cancel, and refuses a file write in the main checkout while an orchestration objective is active. Companion to the core plugin; Claude Code and Claude Desktop only.2
  33. 81vanguardXXX1694/VanguardCommand center for Claude Code: a live pane for your squad of subagents, limits and context, an orchestrator that fans work out to specialist agents, bundled MCP servers and skills, and a lifetime profile with levels and achievements.2
  34. 82vibeshipwag-me/vibeshipVibeship: a 3D spaceship where your Claude Code agents work in crew uniforms. Pick the deck, furnish the stations, chat with the agents and approve permissions. Command: /vibeship2
  35. 83hopesaadshahd/moo.mdThinking discipline for AI work. Clarify intent, shape approach, consult experts, guard unsupervised work, hand work back so you own it.38
  36. 84bash-guardrailsruihe774/cc-bash-guardrailsTool-call guard rules (parser-based), written in CEL; add your own in ~/.claude/bash-guardrails.json or .claude/bash-guardrails.json. On by default: blocks malformed bash and find rooted at /. Opt-in: Monitor, find without -xdev, pgrep/pkill pitfalls, until-grep loops, sudo, run0 confirmation, and pointing cat/head/sed/awk, heredoc writes, sed -i and Python rewrites to the Read, Write and Edit tools
  37. 85collision-guardnateherkai/claude-code-modsAsks before Claude edits a file another open chat changed in the last 30 minutes: Proceed, Move to a worktree, or Cancel (/guard)68
  38. 86blast-guardsatyamk4517/claude-modsHolds risky shell commands for a yes/no with a dry-run report, blocks Python heredocs carrying backslash escapes, and caps concurrent subagents at 4.1
  39. 87blocked-runSpardutti/claude-modsWhen auto mode blocks a command, shows it above the prompt with a button to run it yourself1
  40. 88bouncerffalor/ffalor-pluginsBouncer for Claude Code: enforce condition-based markdown guardrail rules on tool calls — deny or annotate any call whose content matches, instead of file-path-only rules.1
  41. 89cinemetricjeremehancock/cinemetricClaude skills for your Plex server. Read-only reports on your media and server, plus mods for Claude Code: a read-only guard, a library status line and a Now Playing panel.1
  42. 90client-guardjaycp30/jay-claude-modAsks you before any AWS write in a client account, enforces --region in personal projects, keeps CLAUDE.md hand-curated, and shows the AWS context above the prompt.1
  43. 91cloakroommodmyclaude/claude-code-modsCheck your secrets at the door. Claude gets a ticket; the real value only comes back where you allow it.1
  44. 92delegation-guardm-tababi/delegation-guardNudges the main session to hand reading, searching, research and review to subagents, and shows main-context fill and delegated tokens above the prompt.1
  45. 93delete-guardvienna-bio-center/claude-vbc-modsStops Claude before it deletes or overwrites files: a side panel lists every folder and file at stake, with Cancel and Allow buttons1
  46. 94doc-reviewrevelationnow/claude-doc-reviewReview design specs and implementation plans in a pane: move by block, pin comments, ask side questions, submit one review.1
  47. 95expo-install-guardMatheusChiodi/cockpitRefuses npm, pnpm or yarn installs of packages the Expo SDK pins and names the npx expo install command, and tells Claude to rebuild the dev client after a native one1
  48. 96feishu-modJianyuuuuu/claude-code-feishu-modChat with Claude Code from Feishu/Lark: two-way chat, images, permission and question cards, slash commands — via lark-cli1