Claude Code mod
path-guard
Protected files and a project boundary: Claude can't edit .env, keys or .git, asks before touching lockfiles and migrations, and asks before writing outside the project.
Install
/plugin marketplace add mako-code/gobworks
/plugin install path-guard@gobworksMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads files, reads env vars, reads mod state, draws
- Sees
- Write|Edit|NotebookEdit calls, Read|Grep calls, Bash|PowerShell calls
- Draws in
AbovePromptPromptHintSessionMode- Hooks
session.startstate.setui.rendersession.endtool.callcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- mako-code/gobworks
- Folder
mods/safety/path-guard- Marketplace
gobworks- Author
- mako-code
- License
- MIT
- Last updated
- 4 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is path-guard?
Protected files and a project boundary: Claude can't edit .env, keys or .git, asks before touching lockfiles and migrations, and asks before writing outside the project. It is a mod for Claude Code, from mako-code/gobworks on GitHub.
What can the path-guard mod access?
Its widest reach is "reads" (reads files, reads env vars, reads mod state, draws). It sees Write|Edit|NotebookEdit calls, Read|Grep calls, Bash|PowerShell calls. It draws in AbovePrompt, PromptHint, SessionMode. Like any mod, it runs with your permissions.
How do I install path-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add mako-code/gobworks and then /plugin install path-guard@gobworks.
Is path-guard popular?
mako-code/gobworks has 2 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 4 October 2026.
More guard & safety mods
paste-shrinker
2mako-code/gobworks
Asks before sending a huge pasted log, stack trace, JSON or CSV: shrink it to a digest (head, tail, error lines) and save the full text under .claude/pastes, or send it as is.
permission-coach
2mako-code/gobworks
Notices the commands you keep approving by hand and offers a one-click standing allow rule (never for risky or interpreter-wide commands).
jev-test-guard
2mako-code/gobworks
Catches tests being weakened to make them pass: every test-file edit is judged by Jev in a few hundred ms against what you asked for.
project-primer
2mako-code/gobworks
Starts every conversation oriented: one context block with the repo, branch, layout, stack and its build/test/lint/run commands, README summary and recent commits.
clobber-guard
2mako-code/gobworks
Stops accidental truncation of real code: no "// ... rest of the code" placeholders over real code, and a question before a Write or Edit throws away most of a file.
readonly-mode
2mako-code/gobworks
"Look, don't touch": /readonly on blocks edits and every command that is not provably read-only, and tells Claude to investigate and explain instead.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.