Claude Code mod

cortex-guard

Two rules no settings hook enforces, refused at the tool call: wiki pages and their generated ADR mirrors are written only through the Cortex wiki tool, and every git worktree lives at <repo>/.claude/worktrees/<name>/ (one created there is registered with disk_hygiene.py).

Guard & safety mods Plugin marketplace Source

Install

Inside Claude Code

/plugin marketplace add cdeust/claude-mods
/plugin install cortex-guard@claude-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach: L2Writes or runs: runs processes, reads files, reads env vars, reads mod state, draws
Sees: Edit|Write|NotebookEdit|Bash calls
Hooks: session.starttool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.

Claude Code docs

Details

Repository: cdeust/claude-mods
Folder: mods/cortex-guard
Marketplace: claude-mods
Author: cdeust
Type: Guard & safety mods
Last updated: 25 October 2026
Listed in: awesome-claude-code-mods

FAQ

What is cortex-guard?

What can the cortex-guard mod access?

Its widest reach is "writes or runs" (runs processes, reads files, reads env vars, reads mod state, draws). It sees Edit|Write|NotebookEdit|Bash calls. Like any mod, it runs with your permissions.

How do I install cortex-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add cdeust/claude-mods and then /plugin install cortex-guard@claude-mods.

More guard & safety mods

blast-radius

harshitmywork17/claude-mods

Catches risky shell commands (rm -rf, git reset --hard, force push, ...) before they run, forces a permission prompt, and shows what they would touch in a side pane.

Guard & safety mods/plugin install

publish-guard

pomesaka/dotclaude

Before the agent pushes from a repository that has scripts/check-public.sh, runs that check and blocks the push when it finds names or keys that must not be published

Guard & safety mods/plugin install

open-file-guard

seanrobertwright/claude-mods

Before Claude uses a Word, Excel or PowerPoint file you have open, asks you to close it instead of letting the write fail.

Guard & safety mods/plugin install

redact

aecheman27-gif/claude-mods

Redacts secrets and PII from every row Claude Code stores and from the CLAUDE.md and memory context, before the model reads it and before the transcript keeps it. Restores a value only into a file that already holds it. No network, no processes, no file writes.

Guard & safety mods/plugin install

secret-guard

LupusMalusDeviant/mod-box

Stops before Claude writes API keys, tokens, private keys or a non-ignored .env into files, git add or commits. Exceptions for test keys and example files: /secret-allow.

Guard & safety mods/plugin install

beads-guard

baselane-sh/mods

Asks before bd commands that delete data or rewrite history: delete, purge, prune, gc, sql, admin, import, rename, forget, restore, migrate and more. Reads only the command text, runs no bd.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.