Claude Code mod

denial-explainer

Says which rule blocked an action in auto mode and the allow rule that would cover it

Install

From source

git clone https://github.com/cpeaustriajc/cj-stack.git
claude --plugin-dir ./cj-stack/mods/archived/denial-explainer

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach: L1Reads: reads mod state, draws
Sees: classic hooks
Hooks: classic.PermissionDenied

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.

Claude Code docs

Details

Repository: cpeaustriajc/cj-stack
Folder: mods/archived/denial-explainer
Author: CJ
Type: Guard & safety mods
Last updated: 29 October 2026
Listed in: awesome-claude-code-mods

FAQ

What is denial-explainer?

Says which rule blocked an action in auto mode and the allow rule that would cover it It is a mod for Claude Code, from cpeaustriajc/cj-stack on GitHub.

What can the denial-explainer mod access?

Its widest reach is "reads" (reads mod state, draws). It sees classic hooks. Like any mod, it runs with your permissions.

How do I install denial-explainer?

Clone cpeaustriajc/cj-stack and start Claude Code with --plugin-dir pointing at the mod's folder (mods/archived/denial-explainer).

Is denial-explainer popular?

cpeaustriajc/cj-stack has 2 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 29 October 2026.

More guard & safety mods

flightdeck

216

scasella/claude-flightdeck

Flightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt and a session log, all from real session events

Guard & safety mods/plugin install

vibeclaude

161

transkatgirl/vibeclaude

Feel every Claude Code lifecycle event through Intiface Central / buttplug.io. Streaming output, edits, tool results, permission prompts and turn completion are mapped to vibration pulses.

Guard & safety mods/plugin install

secret-box

101

ray-amjad/claude-code-mods

Claude can use a secret without seeing it: a masked box saves keys to .env and gives Claude a placeholder, every key a tool prints comes back as a placeholder, and committing .env is refused

Guard & safety mods/plugin install

transcript-redactor

101

ray-amjad/claude-code-mods

Keeps secrets and email addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call

Guard & safety mods/plugin install

tool-lines

Tickloop/claude-mods

Draws each tool call as one compact 'tool_call: Tool(input) - meta' line and hides its result block

Guard & safety mods/plugin install

so-hud

Kanevry/session-orchestrator

See Session Orchestrator status, warnings and session beacons in Claude Code ($.so contract v1), with protection gates for secret-printing commands, rule traps, outward actions and scope collisions.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.