Claude Code mod
gcloud-guard
Holds gcloud and gsutil commands that would create, change or delete cloud resources, shows the account, project, location and the current state of the targets, and asks you to Proceed or Cancel.
Install
/plugin marketplace add davidho27941/cockpit
/plugin install gcloud-guard@cockpitMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads files, reads env vars, reads mod state, draws
- Sees
- Bash calls
- Draws in
PaneAbovePrompt- Hooks
session.startcommand.runtool.callui.render
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- davidho27941/cockpit
- Folder
plugins/gcloud-guard- Marketplace
cockpit- Author
- davidho27941
- License
- MIT
- Last updated
- 19 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is gcloud-guard?
Holds gcloud and gsutil commands that would create, change or delete cloud resources, shows the account, project, location and the current state of the targets, and asks you to Proceed or Cancel. It is a mod for Claude Code, from davidho27941/cockpit on GitHub.
What can the gcloud-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads files, reads env vars, reads mod state, draws). It sees Bash calls. It draws in Pane, AbovePrompt. Like any mod, it runs with your permissions.
How do I install gcloud-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add davidho27941/cockpit and then /plugin install gcloud-guard@cockpit.
More guard & safety mods
clef-guard
williamchen0606/claude-mods
Has Cloudflare's Clef decision model judge each Bash, Write, Edit and WebFetch call (risk, kind of risk, whether it is read-only, whether it fits your request), asks you itself before risky or always-ask operations, and can approve plain reads for you.
guard
carlvellotti/mods-starter
Pauses risky shell commands (rm -rf, force push, DROP TABLE) and asks you Proceed or Cancel first
claw-guard
threesil/claude-mods
Claw mod: asks for your OK before any connector action that sends, deletes, pays, publishes or shares (fails closed, also when nobody is there to answer), and flags prompt-injection text inside emails, pages and files.
guard
StanislavKozachenko/claude-mods
Blocks destructive shell commands and access to secret files before they run, in Bash and PowerShell, anywhere in a compound command
blast-guard
RobGruhl/claude-mods
DURING the turn: refuses destructive shell commands, tidies the rest, and pins Explore subagents to Haiku
guard-actions
hernandezsanti/claude-code-mods
Saves GitHub Actions minutes: blocks gh run watch/rerun and gh pr checks --watch, and warns when a second PR is opened in the session.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.