Claude Code mod
mod-firewall
A firewall for Claude Code mods: watches what every other mod does (network, processes, secret files, env vars) and asks, blocks or logs
Install
/plugin marketplace add bbarney7/claude-code-mods
/plugin install mod-firewall@claude-code-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads files, reads env vars, reads mod state, persists state, draws
- Draws in
Pane- Hooks
session.startcommand.runplugin.registerhttp.fetchfs.readfs.writeenv.getprocess.runprocess.spawnsession.messagesui.messageui.render
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- bbarney7/claude-code-mods
- Folder
plugins/mod-firewall- Marketplace
claude-code-mods- Author
- Brennen Barney
- License
- MIT
- Last updated
- 29 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is mod-firewall?
A firewall for Claude Code mods: watches what every other mod does (network, processes, secret files, env vars) and asks, blocks or logs It is a mod for Claude Code, from bbarney7/claude-code-mods on GitHub.
What can the mod-firewall mod access?
Its widest reach is "reads" (reads files, reads env vars, reads mod state, persists state, draws). It draws in Pane. Like any mod, it runs with your permissions.
How do I install mod-firewall?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add bbarney7/claude-code-mods and then /plugin install mod-firewall@claude-code-mods.
More guard & safety mods
mission-control
aecheman27-gif/claude-mods
Mission-control skin: [SYS]/[TOOL]/[EDIT] tool rows with per-tool icons and one status block above the prompt (under flightdeck's session log while its pane is open): [SYS] repo, branch, model, hw-guard; [CTL] model and effort buttons; [CTX] context fill with a /ctx pane by tool. /clean for a checklist view.
redact
JinhaoFang/claude-mods
Rewrites sensitive data (emails, IPs, credentials, addresses) out of what enters the model context
harness
Paradox07127/claude-utopia
Skills and guard hooks: ai-code-cleanup, interrogate, shape-task, verify-change, setup, a shared-worktree git guard, and a guard against reading API-key config files
redact
StanislavKozachenko/claude-mods
Keeps secrets that tools print (keys, tokens, passwords, private keys) out of what the model reads and the next request sends
guardrails
azoof-ahmed/claude-mods
A lint gate for Claude's edits: your project's rules, a baseline of existing violations, and a PreToolUse check that refuses only edits adding new ones.
released-objects
alokm3hta-star/Claude-Mods
Flag SAP objects in ABAP code that are not released, deprecated or have no API, with SAP's successor, using SAP's own release lists. It flags, never blocks.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.