Claude Code mod
env-guard
Asks you before Claude reads a .env or key file, and refuses when no one is there to answer.
Install
/plugin marketplace add seanrobertwright/claude-mods
/plugin install env-guard@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads files, draws
- Sees
- /"^(Read|Grep|Glob)$"/ calls, /"^(Bash|PowerShell)$"/ calls
- Hooks
turn.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- seanrobertwright/claude-mods
- Folder
mods/env-guard- Marketplace
claude-mods- Last updated
- 12 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is env-guard?
Asks you before Claude reads a .env or key file, and refuses when no one is there to answer. It is a mod for Claude Code, from seanrobertwright/claude-mods on GitHub.
What can the env-guard mod access?
Its widest reach is "reads" (reads files, draws). It sees /"^(Read|Grep|Glob)$"/ calls, /"^(Bash|PowerShell)$"/ calls. Like any mod, it runs with your permissions.
How do I install env-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add seanrobertwright/claude-mods and then /plugin install env-guard@claude-mods.
Is env-guard popular?
seanrobertwright/claude-mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 12 October 2026.
More guard & safety mods
remote-guard
narrowstacks/claude-code-mods
Asks before a destructive command runs on another machine over ssh (restarts, deletes, kills, reboots)
oracle-paging-guard
1MatheusChiodi/cockpit
Refuses an edit that adds FETCH FIRST, OFFSET ROWS or LIMIT to SQL, which Oracle 11g cannot run, and names the ROWNUM form
flightdeck
aecheman27-gif/claude-mods
Flightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt and a session log, all from real session events
guardian
3Plagemes/claude-mods
One security policy for every guard mod — permissive, standard or strict — plus a project safety score.
ask-on-auto-deny
tylergraydev/cc-mods
When auto mode's classifier blocks a tool call, asks you above the prompt and lets you allow that exact call once
env-protect
vincentlauriat/ModsTools
Asks the user before Claude reads secret files (.env, private keys, .netrc, .npmrc, .aws/credentials, keychains…) with Read, Grep, Glob or Bash
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.