Claude Code mod
guardrails-approval
A human signs off before anything that can't be undone: publishing, killing protected processes, editing secrets or stale copies.
Install
/plugin marketplace add scaso01/claude-risk-guardrails
/plugin install guardrails-approval@claude-risk-guardrailsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L3Network: network, runs processes, writes files, reads files, reads env vars, draws
- Sees
- Edit|Write|NotebookEdit calls, Bash|PowerShell calls, ? calls, Edit|Write|NotebookEdit|Bash|PowerShell calls, every prompt
- Hooks
tool.callsession.startprompt.submit
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- scaso01/claude-risk-guardrails
- Folder
packs/approval- Marketplace
claude-risk-guardrails- Author
- scaso01
- License
- MIT
- Last updated
- 29 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is guardrails-approval?
A human signs off before anything that can't be undone: publishing, killing protected processes, editing secrets or stale copies. It is a mod for Claude Code, from scaso01/claude-risk-guardrails on GitHub.
What can the guardrails-approval mod access?
Its widest reach is "network" (network, runs processes, writes files, reads files, reads env vars, draws). It sees Edit|Write|NotebookEdit calls, Bash|PowerShell calls, ? calls, Edit|Write|NotebookEdit|Bash|PowerShell calls, every prompt. Like any mod, it runs with your permissions.
How do I install guardrails-approval?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add scaso01/claude-risk-guardrails and then /plugin install guardrails-approval@claude-risk-guardrails.
More guard & safety mods
guardrails
Stoica-Mihai/claude-mods
Blocks the Bash commands your own rules file names, and shows every block in /blocked. Ships no rules.
guardrails-development
scaso01/claude-risk-guardrails
Development standards: look before building, test what changed, pass the repo's checks, keep the rules in view.
guardrails
juniormartinxo/jm-claude-mods
Travas dos fluxos de card: entrega sem commit/push/PR, comentários fora do pt-BR, Linear em projeto do It's a Plan e card criado sem o consentimento do usuário
guardrails-lite
edtrackai/claude-code-guardrails-lite
Pattern-based checks that deny .env reads, git force pushes and rm -rf on / or your home folder before Claude Code runs them.
guardian
Juan-Gpu/mis-mods
Pide confirmación con botones antes de que Claude ejecute comandos peligrosos (rm -rf, git push --force, git reset --hard)
haunted-repo
choaticpixels/HauntedClaudeMod
Delete a file and its ghost haunts your prompt, whispering fragments of its lost code until you restore it. Seances, exorcisms, poltergeists and secrets.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.