Claude Code mod
guard-devops
Asks before harsh DevOps commands: destructive Docker, Kubernetes and Helm calls, CI config edits, broad chmod and chown, and git commands that lose work. Add infra-guard for plain kubectl delete.
Install
/plugin marketplace add baselane-sh/mods
/plugin install guard-devops@baselane-mods-devMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers
- Sees
- classic hooks
- Hooks
classic.PreToolUse
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- baselane-sh/mods
- Folder
plugins/guard-devops- Marketplace
baselane-mods-dev- Author
- Baselane
- License
- MIT
- Last updated
- 6 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is guard-devops?
Asks before harsh DevOps commands: destructive Docker, Kubernetes and Helm calls, CI config edits, broad chmod and chown, and git commands that lose work. Add infra-guard for plain kubectl delete. It is a mod for Claude Code, from baselane-sh/mods on GitHub.
What can the guard-devops mod access?
Its widest reach is "draws and remembers". It sees classic hooks. Like any mod, it runs with your permissions.
How do I install guard-devops?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add baselane-sh/mods and then /plugin install guard-devops@baselane-mods-dev.
Is guard-devops popular?
baselane-sh/mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 6 October 2026.
More guard & safety mods
x-mod-redact
dvakatsiienko/frame
keeps secrets out of every transcript: api keys, tokens and private keys read as a stable placeholder in every kept row, and come back only inside the tool call that names them
dash-guard
6mutlumehmet/claude-plugins
Refuses prose that Claude writes with an em dash, an en dash or a double hyphen, and tells Claude which lines to rewrite
verification-guard
oleksandrkodua/qa-mods
Checks Claude's claims (tests pass, verified, fixed, no regression, API returns N) against the tool calls that actually ran. Unsupported claims get a visible warning; /evidence lists claims and the evidence behind each. Warns only, never blocks.
probe2
24ucsandman/Agnostic-AI
Interception probe: deny, rewrite, replace result, delay, throw, register tool, classify
shell-edit-guard
daviddecorso/claude-mods
Blocks Bash commands that write files (inline scripts, sed -i, redirects, tee) and points the model at Edit/Write instead
secret-box
2iuliandita/mods
Resolves {{secret:NAME}} placeholders from Linux Secret Service or macOS Keychain at execution time, with optional directory scopes and host-specific output scrubbing.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.