Claude Code mod

guardrails

Stops risky shell commands before they run: killing ports owned by Docker containers, printing secrets from the environment, rewriting your kubeconfig, and asks before kubectl writes on production contexts.

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add lucasleandro08/claude-mods
/plugin install guardrails@dracula-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L2Writes or runs: runs processes, reads files, reads env vars, reads mod state, draws
Sees
Bash calls
Hooks
tool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
lucasleandro08/claude-mods
Folder
plugins/guardrails
Marketplace
dracula-mods
Author
Lucas Leandro
Type
Guard & safety mods
License
MIT
Last updated
13 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is guardrails?

Stops risky shell commands before they run: killing ports owned by Docker containers, printing secrets from the environment, rewriting your kubeconfig, and asks before kubectl writes on production contexts. It is a mod for Claude Code, from lucasleandro08/claude-mods on GitHub.

What can the guardrails mod access?

Its widest reach is "writes or runs" (runs processes, reads files, reads env vars, reads mod state, draws). It sees Bash calls. Like any mod, it runs with your permissions.

How do I install guardrails?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add lucasleandro08/claude-mods and then /plugin install guardrails@dracula-mods.

More guard & safety mods

eol-guard

Tihi321/claude-mods

Keeps files' git line endings (CRLF/LF) after Claude's edits and shell commands, and stops prettier checks failing on a CRLF checkout.

Guard & safety mods/plugin install

modbar

lnodonly/claude-mods

Draws the area above the prompt for other mods: their blocks, packed into configurable rows

Guard & safety mods/plugin install

dot-guard

theagitist/claude-mods

Block `git add` of a whole $HOME work-tree (dot add -A/./*), which would stage your entire home directory.

Guard & safety mods

permissions

danielmalka/malka-claude-mods

Shows the permission mode and picks the one new sessions start in (permissions.defaultMode). Does nothing until you pick something.

Guard & safety mods/plugin install

client-mask

alokm3hta-star/Claude-Mods

Mask client names, personal data and secrets before anything leaves this machine; keep the list private and leave no trace of what was swapped

Guard & safety mods

prompt-guard

AbyssCN/claude-lead-harness

Stops prompts that contain API keys or passwords (puts a redacted copy back in the input box) and drops the same message re-sent within a few minutes.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.