#ModGitHub stars

1. 385prompt-guardAbyssCN/claude-lead-harnessStops prompts that contain API keys or passwords (puts a redacted copy back in the input box) and drops the same message re-sent within a few minutes.
2. 386rm-guardvincentlauriat/ModsToolsAsks the user before destructive Bash commands run: rm -rf, git reset --hard, git clean -f, discarding all changes, SQL DROP/TRUNCATE, find -delete, mkfs, dd onto a device
3. 387sandbox-guardoleksandrkodua/qa-modsDenies Edit/Write/Bash writes to Claude config paths the sandbox cannot write (settings, skills, plugins, hooks, projects, ...) and tells Claude to hand the user a ready Terminal command instead of trying workarounds.
4. 388security-guardUsamaSadiq/claude-modsChecks git commit and PR commands against the rules in your own and the project's CLAUDE.md files
5. 389transcript-fxLegendSilvia/claude-code-modsGold tool blocks, teal prompt panels, an animated spinner bar and a rainbow turn footer in the transcript
6. 390mem-guardschreibse/claude-code-modsBash memory rules: Node commands run in claude-cmd.slice, and runs that would starve the machine are refused3
7. 391lk-secret-guardconnectwithub/loopkeeperA seatbelt for secrets: stops credential-shaped strings and your private deny-list of words before Claude writes them into files or shell commands.1
8. 392pm-guardMatheusChiodi/cockpitRefuses npm, pnpm, yarn or bun commands that use a different package manager than the project's lockfile, and names the right one1
9. 393secret-guardJustmalhar/awesome-claude-modsBlocks Write, Edit and Bash calls that would put an API key, token or private key into a file or command.1
10. 394secret-scrubberTroyJLorents-GH/mod-squadRedacts API keys, tokens, private keys and .env secrets from tool output before the transcript stores it and before the model reads it.1
11. 395jevmako-code/gobworksJev (TypeSafe's System One model) as Claude's instant co-processor: bulk filter/classify/rank/semantic-grep tools, risk notes under permission dialogs, a check on unverified 'it passes' claims, and optional per-prompt effort.2
12. 396dotlucasleandro08/claude-modsAn always-on assistant with a name and a face: give it goals, and it keeps working on them in background rounds, asks before risky actions, briefs you in the morning and pings you when it needs a decision.
13. 397guardiaojuniormartinxo/jm-claude-modsVeta ações perigosas do agente: ler arquivos de segredo (.env, chaves), rm -rf na raiz, push --force, reset --hard, DROP TABLE
14. 398heavy-job-guardazoof-ahmed/claude-modsStops Claude from starting a heavy job (typecheck, tests, builds) while another one is already running on the machine.
15. 399keymasterdavidcoulson/crab-workshopSecret tripwire: masks API keys, tokens, passwords and private keys in tool output before Claude, the transcript or your screen sees them, says so in a toast, and counts saves in the status line. /keymaster lists what was masked (kind and place, never the value).
16. 400repo-guardYuehengHan/my-claude-modsBlocks destructive git commands and asks before Claude first edits a repo other than the session's own
17. 401ringtonesUsamaSadiq/claude-modsShort synthesized chimes when a long turn finishes, a call is blocked, a turn fails or you ship
18. 402slopless0xGondarxyz/claude-code-modsBlocks AI sounding text in social media writing (X replies, X posts, LinkedIn posts) and injects the writing rules.
19. 403loop-guardVedantAndhale/claude-pro-kitHolds back a shell command once when the exact same command already failed twice in a row, and tells Claude to change approach; retrying it still goes through.12
20. 404oracle-syntax-guardMatheusChiodi/cockpitRefuses an edit that adds IDENTITY columns, LISTAGG ON OVERFLOW, JSON functions or BOOLEAN columns, none of which Oracle 11g has1
21. 405risky-holdBroo37/claude-modsHolds a destructive shell command (recursive delete, git reset --hard, force push, disk or database wipe) until you say run it1
22. 406sign-guardLupusMalusDeviant/mod-boxSpots Windows builds (cargo --release, dotnet publish, go build, pyinstaller, tauri, electron-builder, msbuild) and signs the new .exe/.msi/.msix with your own signing script.1
23. 407tool-guardsAkash001uts/claude-modsStops Claude editing files through the shell (so /rewind works), keeps its attribution out of your commits and PRs, and asks before a read that would eat a quarter of your remaining context1
24. 408ask-guardschreibse/claude-code-modsSends Claude back when a reply ends on a yes/no question written as prose instead of AskUserQuestion3
25. 409scope-guardyash-gadodia/claude-modsCounts the distinct files a turn edits and stops at a threshold to make the goal get restated, so a small ask cannot quietly become a refactor.3
26. 410collision-guardVedantAndhale/claude-pro-kitAsks before Claude edits a file another chat on this machine changed in the last 30 minutes. Each chat keeps its own small ledger; no model calls, no network.12
27. 411loop-guardarasovic/claude-code-modsTells the model, out of the user's sight, to stop when the same call fails twice with the same error8
28. 412prompt-timeKilimcininKorOglu/claude-code-modsDraws the time under each of your messages and each text block of the model's replies, also for a resumed session whose transcript is 4 MiB or smaller. Display only: nothing reaches the model.12
29. 413checkpointpartalemre/MODZSilent git snapshot before each turn's first file write; /checkpoints lists turns and undoes one after a confirm5
30. 414course-correctAkash001uts/claude-modsAdds a note for Claude when it goes round in circles on the same error, says it's done without checking, or slips into writing habits you've banned. Never blocks anything1
31. 415secret-guardLupusMalusDeviant/mod-boxStops before Claude writes API keys, tokens, private keys or a non-ignored .env into files, git add or commits. Exceptions for test keys and example files: /secret-allow.1
32. 416open-file-guardseanrobertwright/claude-modsBefore Claude uses a Word, Excel or PowerPoint file you have open, asks you to close it instead of letting the write fail.3
33. 417blast-radiusharshitmywork17/claude-modsCatches risky shell commands (rm -rf, git reset --hard, force push, ...) before they run, forces a permission prompt, and shows what they would touch in a side pane.
34. 418cortex-guardcdeust/claude-modsTwo rules no settings hook enforces, refused at the tool call: wiki pages and their generated ADR mirrors are written only through the Cortex wiki tool, and every git worktree lives at <repo>/.claude/worktrees/<name>/ (one created there is registered with disk_hygiene.py).
35. 419publish-guardpomesaka/dotclaudeBefore the agent pushes from a repository that has scripts/check-public.sh, runs that check and blocks the push when it finds names or keys that must not be published
36. 420redactaecheman27-gif/claude-modsRedacts secrets and PII from every row Claude Code stores and from the CLAUDE.md and memory context, before the model reads it and before the transcript keeps it. Restores a value only into a file that already holds it. No network, no processes, no file writes.
37. 421beads-guardbaselane-sh/modsAsks before bd commands that delete data or rewrite history: delete, purge, prune, gc, sql, admin, import, rename, forget, restore, migrate and more. Reads only the command text, runs no bd.3
38. 422needs-youAkash001uts/claude-modsMessages you on Slack when Claude has been waiting on you for a while (a finished turn, a permission prompt, a question); reply there and the session carries on1
39. 423aim-widgetoMaN-Rod/claude-code-widgetsWhere a command lands outside this folder: the kube context, cloud profile, Terraform workspace or database it is aimed at, named in the permission dialog4
40. 424commit-guardirfanfaraaz/claude-kitNever commits docs/superpowers, never pushes unless you said push, asks before committing on main/staging/prod
41. 425cortex-wikicdeust/claude-mods/wiki <wiki/**.md>: compile a Cortex wiki page (Markdown with ```tikz blocks) to PDF through pandoc and xelatex, and open it.
42. 426guarda-colisaoinematds/inema-modsGuarda de colisão: antes de editar, avisa se o arquivo foi mudado fora desta sessão (outra sessão, você no editor, outro programa) e pergunta o que fazer (/colisao)
43. 427guardrailtylergraydev/cc-modsBlocks hook-skipping git commands and live data operations that have no successful dry run first; you can allow one at a time
44. 428quick-actionsoleksandrkodua/qa-modsIn VS Code (no band above the prompt) the typed /compact and /clear ask first (confirm / cancel). The Compact and Clear buttons of the desktop and terminal are in the hud band.
45. 429secret-guardJoseph-Ayoub/claude-modsHolds a prompt that carries a credential shape and offers to send it redacted, telling Claude where the value really lives.
46. 430shared-edit-guardaecheman27-gif/claude-modsAsks before Claude edits a file that another tool (Gemini, an editor, another agent) changed in the last few minutes, through Edit/Write, a shell command that writes, or an MCP write tool. A Cancel keeps asking until you say Edit anyway or the change ages out.
47. 431secret-guardjoeldg/claude-modsHolds back a prompt that looks like it carries a secret (API keys, tokens, access-key pairs, private keys, passwords) before it reaches the transcript, puts it back in the box, and offers to save the secret as an env var in ~/.zshrc and send $NAME instead. No model calls.2
48. 432guard-essentialsbaselane-sh/modsAsks only before harsh or disaster commands: destructive infra, git and SQL, piping downloads into a shell, sudo, leaking or committing secrets. Reads git. The quiet choice for daily work.3