#ModGitHub stars

1. 193identity-guardnone-ascetic/claude-modsStops commits and pushes under the wrong git identity (the work email) before they reach GitHub, and says exactly how to fix it.
2. 194image-peekthomasreichmann/image-peekDraws the images the agent reads (Read on png/jpg/gif/webp, image blocks in tool results) as pictures under their tool row in the terminal transcript.
3. 195img-viewliliang-cn/aiguiShows images in a pane beside the conversation: real pixels where the terminal draws them, colour block art everywhere else
4. 196inboxtylergraydev/cc-modsThe repo's inbox/ work queue as a pane: todo items at the root, then processing/, review/, done/ and blocked/. Shows what is ready (dependencies, owner-path overlap, locks), starts Codex or Claude workers on items, drains the queue, reviews and accepts, with a watchdog for idle workers and cross-session locks
5. 197jevyinjs/claude-jevJev answers clear permission prompts, flags prompt injection in fetched content, checks done claims, nudges large or vague requests, and routes effort and models without trading away the prompt cache.
6. 198jev-guardklefix/claude-code-modsAsks Jev whether a prompt leaves a choice open and whether each edit stays within what the user approved
7. 199keepwarmluwux/keepwarmIdle-session guard for Claude Code's 1-hour prompt cache (macOS): about 50 idle minutes after the last turn of a large session it notifies you, optionally after a cache-read fork judges whether to compact, keep warm or leave it; every request and change it makes is audited. Derived from cache-tax (MIT, Karan Bansal).
8. 200leaksdevsomelife/somelife-claude-modsNotices personal identifiers and secrets that reach the model, lists them per project, and can redact or block them, with modes and ignore lists per folder
9. 201mask-that-passmyveroai/mask-that-passMasks credentials in tool output (URL passwords, *_TOKEN / *_SECRET / *_PASSWORD values, API keys, bearer tokens, private keys) before Claude or the transcript sees them. No network, files or processes.
10. 202mellukotaraa09/easyClaudeA stack-agnostic harness that makes Claude Code work well on any project: persistent state, an enforced verify gate, guardrails, and a token-frugal escape hatch.
11. 203merge-watchb00y0h/merge-watchA panel that groups every open merge request or pull request by whether it can merge, shows failing jobs, and can retry or merge after you confirm. Refreshed once a minute.
12. 204mermaid-inlineConte777/claude-mermaidMermaid diagrams in Claude Code: every ```mermaid block Claude writes is drawn as a picture right where the fence was in the transcript, with an open-SVG button, and as box art where the terminal cannot show pictures. Fork of galElmalah/claude-mods claude-mermaid. Needs function hooks (early access), node and resvg.
13. 205mermaid-rendermaxp-riot/mermaid-renderDraws the ```mermaid blocks of Claude's replies as images in the terminal, in light or dark, and opens them in Excalidraw
14. 206migration-guardbalen-abd/claude-migration-guardMakes Claude ask before it touches your database migrations or runs destructive SQL, with the risk and what it found.
15. 207mode-gateMarcusJellinghaus/claude-mode-gateA Claude Code mod with switchable permission profiles: a safe baseline and named profiles you switch on and off. Bash that no active rule allows asks. For other tools the mod adds only its own rules and guards; Claude Code's own verdict applies to the rest.
16. 208model-guardRecokioshi/claude-kitChoose the model versions Claude and its subagents may use: /models lists the newest of each family from Anthropic's Models API (older versions one key away); block a version, or a family's new ones, and subagents, workflows and /model asking for it are refused or moved to an allowed version. One list shared by every Claude Code window on the machine; a repo can keep its own.
17. 209nvda-statuslbk2907/nvda-statusClaude Code for NVDA users on Windows: spoken announcements (finished, question, permission, background task), /time, /read and /quiet, a status line with working time and tokens, and a popup to answer Claude's questions from any app
18. 210out-to-lunchjambolo/claude-modsShows what Claude is doing right now and why it is taking long: API wait, thinking, a slow tool, a permission prompt, subagents, compaction.
19. 211pii-shieldJiang-Yude/pii-shieldReplace protected people's names, Taiwan ID numbers, phone numbers and emails with placeholders before the model reads them.
20. 212pkexec-guardjoshkerr/claude-modsRoutes `sudo` in Bash calls to a password prompt the person can answer: pkexec on a Linux desktop, an osascript administrator dialog on macOS, and Windows sudo's UAC prompt on Windows.
21. 213polishHuliLulu46/polish/polish <text>: rewrites it into a clearer prompt and leaves the result in the input box for you to confirm
22. 214port-guardcolorfield/claude-port-guardStops Claude from killing, or running E2E tests against, another project's local dev server
23. 215prompt-redactezoushen/claude-modsReplaces secrets and credentials with stable placeholders inside Claude Code before the model or the session file ever sees them — prompts, tool results and replies, plus attachments and compaction summaries where the platform lets this mod see them — and restores real values only in Edit/Write/NotebookEdit arguments. 220-rule corpus plus checksum detectors, a benign-shape allowlist, fail-closed scanning, a /redact pane and a redacted-values skill. No network, no subprocess, no model call.
24. 216prose-guardcprentice9/ccmodsBlocks em dashes in edits, shell commands and replies, and British spellings in prose files, commit messages and pull requests.
25. 217protocol-guardMar5929/claude-toolkitRequired workflow checks with Claude Code function hooks. Refuses a knowledge-file write, or a memory-service save in external memory mode, until knowledge-save is open, refuses hand edits to generated indexes, refuses a pull request, close or merge until knowledge-save (and the work or merge-and-clean-up skill) is open, and holds a final reply once when working memory or the index rebuild and checker did not follow the change. Fact checks only: no model call and no reading of the agent's words. Runs only when CLAUDE_CODE_ENABLE_FUNCTION_HOOKS=1.
26. 218publish-guardseanyyoo/claude-code-modsStops Claude from typing private terms into the browser or writing them into your publishing files, and keeps a log of what it blocked
27. 219push-guardkk5190/claude-code-modsBlocks git push and gh pr create until you confirm the commits, their authors and the diff size, with a side pane of the last check
28. 220quarantineccdwyer/quarantineWraps web, MCP and third-party tool output as untrusted data and defangs prompt-injection lines before the model reads them
29. 221query-guardnu0ma/query-guardAsks before Claude runs destructive or slow-looking SQL through a DB CLI: DELETE, UPDATE without WHERE, DROP, TRUNCATE, full scans and cartesian joins.
30. 222quick-replyivanzoid/cc-quick-reply-modReply to parts of an answer: comment on blocks inline, or quote a selection with > on an empty prompt line
31. 223roclaudevinkdc/roclaudeRoblox Studio safety layer for Claude Code (Studio MCP): RemoteEvent security audit, undo, Team Create protection, a confirmation before destructive Luau, and a live activity view that replays every change.
32. 224safety-guardwablevaibhav/claude-modsBlocks risky actions before they run: recursive deletes of root or home, force pushes, pipe-to-shell installs, and writes to secret or key files.
33. 225sandbox-tunerdot-agi/sandbox-tunerExplains each Claude Code sandbox block in plain words and turns recurring blocks into reviewed, one-press, undoable edits of your user settings.
34. 226script-gateABDUAZIZX/script-gateClaude Code mod: blocks running scripts straight from the internet (download-and-execute pipes, encoded PowerShell, LOLBin downloads)
35. 227sdd-analyze-gatefib1618agent/claude-mod-speckitSDD capability 04: semantic Analyze findings, read-only run guard (best effort), Analyze result state. Execution is delegated through the Review Gate.
36. 228seatbeltaayanrehman/crew-hqBlocks destructive commands (rm -rf, force push, reset --hard, DROP TABLE) and .env edits before they run
37. 229secchain-maskbannzai/SecChainHides SecChain's secret values in prompts, tool results and instructions before the model reads them, through secchain mask.
38. 230secret-guard0xGondarxyz/claude-code-modsMasks API keys and tokens in tool results before Claude reads them, and blocks a git push that would leak secrets or home paths to a public repo.
39. 231secret-guarddavidho27941/cockpitKeeps API keys, cloud credentials and other secrets out of what is sent to the model: every text that enters the conversation is scanned and each match is replaced with a meaningful placeholder such as <google api key>.
40. 232secret-guardhagaybar/claude-secret-guardKeeps API keys, tokens and passwords out of the transcript, tool output, files, commits, PRs and issues.
41. 233secret-guardnicolas-fer/secret-guardBloqueia prompts e saídas de ferramentas que contenham chaves/segredos antes de chegarem ao modelo
42. 234secret-guardSajid-Rahman0126/claude-studio-modsStops Claude from reading or editing .env files, private keys and credential files, including through symlinks and shell commands
43. 235secret-guardtksunw/secret-guardBlocks git commit and git push from Claude when the change carries a secret file or a credential-shaped line, and flags secret files that are not gitignored
44. 236secret-guardverastack-labs/secret-guardBlocks API keys, tokens and private keys from being written to disk, put on a command line, or committed to git by Claude.
45. 237secret-maskmashabek/claude-modsMasks secrets (API keys, tokens, passwords, .env values) in tool output and prompts before Claude reads them
46. 238secret-modzyx1121/secret-modAsk for credentials in a form, keep them in the macOS keychain, and run commands with them without showing the values to Claude
47. 239secret-redactorjidhra/claude-modsKeeps secrets, email addresses and IP addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call
48. 240secret-sentryccdwyer/secret-sentryTwo-way secret scrubbing: redacts credentials before the model sees them and blocks writing them into tracked files or shell commands