Claude Code mod
clef-guard
Has Cloudflare's Clef decision model judge each Bash, Write, Edit and WebFetch call (risk, kind of risk, whether it is read-only, whether it fits your request), asks you itself before risky or always-ask operations, and can approve plain reads for you.
Install
/plugin marketplace add williamchen0606/claude-mods
/plugin install clef-guard@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L3Network: network, reads env vars, reads the transcript, draws
- Hooks
tool.check
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- williamchen0606/claude-mods
- Folder
mods/clef-guard- Marketplace
claude-mods- Author
- williamchen0606
- License
- MIT
- Last updated
- 1 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is clef-guard?
Has Cloudflare's Clef decision model judge each Bash, Write, Edit and WebFetch call (risk, kind of risk, whether it is read-only, whether it fits your request), asks you itself before risky or always-ask operations, and can approve plain reads for you. It is a mod for Claude Code, from williamchen0606/claude-mods on GitHub.
What can the clef-guard mod access?
Its widest reach is "network" (network, reads env vars, reads the transcript, draws). Like any mod, it runs with your permissions.
How do I install clef-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add williamchen0606/claude-mods and then /plugin install clef-guard@claude-mods.
More guard & safety mods
claw-guard
threesil/claude-mods
Claw mod: asks for your OK before any connector action that sends, deletes, pays, publishes or shares (fails closed, also when nobody is there to answer), and flags prompt-injection text inside emails, pages and files.
gcloud-guard
davidho27941/cockpit
Holds gcloud and gsutil commands that would create, change or delete cloud resources, shows the account, project, location and the current state of the targets, and asks you to Proceed or Cancel.
blast-guard
RobGruhl/claude-mods
DURING the turn: refuses destructive shell commands, tidies the rest, and pins Explore subagents to Haiku
guard
carlvellotti/mods-starter
Pauses risky shell commands (rm -rf, force push, DROP TABLE) and asks you Proceed or Cancel first
reminder-log
3schreibse/claude-code-mods
Tallies the reminders Claude Code injects for the model, per session; drops the token counter and repeated attribution blocks; /reminders prints the last 30 days
guard
StanislavKozachenko/claude-mods
Blocks destructive shell commands and access to secret files before they run, in Bash and PowerShell, anywhere in a compound command
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.