guardrails

ice-lfernandes/claude-code-mods

Counts permission dialogs per rule and, after repeated approvals, offers to add the rule to permissions.allow, asking before it writes

LupusMalusDeviant/mod-box

Before Claude installs or runs a package (npm, pnpm, yarn, bun, npx, pip, uv, poetry, pipx, cargo), asks the public registry about it. Holds the command when the package does not exist (a made-up name), is under 14 days old, or looks like a well-known package and is young or thin (typosquatting). Allow in the band or with /pkg-allow.

Tekkiiiii/the-agency

Stall detector per agent loop: 5 identical tool calls in a row warn that loop and leave the session-state.json stall marker for the next SessionStart

Justmalhar/awesome-claude-mods

Blocks Write, Edit and MultiEdit calls that target a path outside the project root or inside .git, plus optional deny globs.

KilimcininKorOglu/claude-code-mods

Has Gemini review each plan before the approval dialog, from the plan and the conversation, and sends a plan with a blocking finding back to the model, at most twice. Off until /gemini-plan-review on; gemini-core holds the key, tier, model and thinking level.

finalpantasy/claude-mod-pack

Claude Push Guard: stops a git push Claude runs when the commits would publish your name, email, home folder path or other words you list, and says exactly where they are.