Claude Code mod
injection-guard
Defuses prompt injection in tool output: strips invisible Unicode that hides text from you but not from the model, and flags web pages, files and command output that carry instructions aimed at Claude.
Install
/plugin marketplace add Singh-AP/awesome-claude-mods
/plugin install injection-guard@awesome-claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers: persists state, draws
- Sees
- every tool call
- Hooks
session.starttool.callcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- Singh-AP/awesome-claude-mods
- Folder
mods/safety/injection-guard- Marketplace
awesome-claude-mods- Author
- awesome-claude-mods
- License
- MIT
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is injection-guard?
Defuses prompt injection in tool output: strips invisible Unicode that hides text from you but not from the model, and flags web pages, files and command output that carry instructions aimed at Claude. It is a mod for Claude Code, from Singh-AP/awesome-claude-mods on GitHub.
What can the injection-guard mod access?
Its widest reach is "draws and remembers" (persists state, draws). It sees every tool call. Like any mod, it runs with your permissions.
How do I install injection-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Singh-AP/awesome-claude-mods and then /plugin install injection-guard@awesome-claude-mods.
Is injection-guard popular?
Singh-AP/awesome-claude-mods has 4 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 31 October 2026.
More guard & safety mods
phone-approve
2ShriD5/claude-mods
Approve or deny Claude Code's permission prompts from Telegram, with the terminal prompt as the fallback.
rehearsal-widget
4oMaN-Rod/claude-code-widgets
Which of the commands and edits Claude has made in this project would stop for permission or be refused right now, asked of the engine's own permission check without running anything
mermaid-inline
2musingfox/cc-plugins
[Experimental] Every ```mermaid block Claude writes drawn as plain box art in place in the transcript — flowchart, sequence, class, state and xychart; CJK labels aligned (Claude Mod fork of claude-mermaid; needs Claude Code 2.1.287+)
shared-file-guard
6mutlumehmet/claude-plugins
Refuses a shell write to a shared file (STATUS.md, CLAUDE.md, MEMORY.md, or the files you name) that this session has not read, or that another session changed since
bench
2mako-code/gobworks
Measures a command: warmup and timed runs, median/p95/stddev and outliers, two commands compared or a saved baseline per project, and a pane with a block distribution plot. Bounded, one at a time, never during Claude's turn unless Claude asked.
guardian
24ucsandman/Agnostic-AI
GUARDIAN: executable policy that protects lab/demos/protected/** from Write/Edit/Bash, whatever CLAUDE.md says
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.