Claude Code mod
package-guard
Before Claude installs or runs a package (npm, pnpm, yarn, bun, npx, pip, uv, poetry, pipx, cargo), asks the public registry about it. Holds the command when the package does not exist (a made-up name), is under 14 days old, or looks like a well-known package and is young or thin (typosquatting). Allow in the band or with /pkg-allow.
Install
/plugin marketplace add LupusMalusDeviant/mod-box
/plugin install package-guard@mod-boxMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads mod state, draws
- Sees
- Bash calls
- Draws in
AbovePrompt- Hooks
ui.rendersession.starttool.callcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- LupusMalusDeviant/mod-box
- Folder
plugins/package-guard- Marketplace
mod-box- Author
- Lupus Malus Deviant
- License
- MIT
- Last updated
- 26 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is package-guard?
Before Claude installs or runs a package (npm, pnpm, yarn, bun, npx, pip, uv, poetry, pipx, cargo), asks the public registry about it. Holds the command when the package does not exist (a made-up name), is under 14 days old, or looks like a well-known package and is young or thin (typosquatting). Allow in the band or with /pkg-allow. It is a mod for Claude Code, from LupusMalusDeviant/mod-box on GitHub.
What can the package-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads mod state, draws). It sees Bash calls. It draws in AbovePrompt. Like any mod, it runs with your permissions.
How do I install package-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add LupusMalusDeviant/mod-box and then /plugin install package-guard@mod-box.
Is package-guard popular?
LupusMalusDeviant/mod-box has 1 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 26 October 2026.
More guard & safety mods
guardrails
1lippdev/lippstack
Real guardrails, enforced by hooks: /careful asks you before a destructive shell command runs; /freeze <path> blocks edits outside a folder.
path-guard
1Justmalhar/awesome-claude-mods
Blocks Write, Edit and MultiEdit calls that target a path outside the project root or inside .git, plus optional deny globs.
allowlist-coach
11ice-lfernandes/claude-code-mods
Counts permission dialogs per rule and, after repeated approvals, offers to add the rule to permissions.allow, asking before it writes
push-guard
1finalpantasy/claude-mod-pack
Claude Push Guard: stops a git push Claude runs when the commits would publish your name, email, home folder path or other words you list, and says exactly where they are.
loop-guard
7Tekkiiiii/the-agency
Stall detector per agent loop: 5 identical tool calls in a row warn that loop and leave the session-state.json stall marker for the next SessionStart
safety-net
1TroyJLorents-GH/mod-squad
Blocks destructive tool calls before they run (force pushes, rm -rf outside the project, DROP TABLE, terraform destroy, writes to .env and keys, ...) and explains why.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.