Claude Code mod

path-jail

Allows writes only inside the project root, resolving symlinks and .. tricks.

3 starsWorkflow mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add Plagemes/claude-mods
/plugin install path-jail@claude-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L1Reads: reads files, reads env vars, reads settings, reads mod state, draws, other: $.mods.hello, other: $.mods.mode, other: $.mods.publish, other: $.mods.registerTab
Sees
classic hooks, /"^(?:Edit|Write|MultiEdit|NotebookEdit|Bash)$"/ calls
Hooks
session.startcommand.runclassic.DirectoryAddedtool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
Plagemes/claude-mods
Folder
mods/path-jail
Marketplace
claude-mods
Author
Plagemes
Type
Workflow mods
Website
plagemes.github.io/claude-mods/#path-jail
License
MIT
Last updated
15 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is path-jail?

Allows writes only inside the project root, resolving symlinks and .. tricks. It is a mod for Claude Code, from Plagemes/claude-mods on GitHub.

What can the path-jail mod access?

Its widest reach is "reads" (reads files, reads env vars, reads settings, reads mod state, draws, other: $.mods.hello, other: $.mods.mode, other: $.mods.publish, other: $.mods.registerTab). It sees classic hooks, /"^(?:Edit|Write|MultiEdit|NotebookEdit|Bash)$"/ calls. Like any mod, it runs with your permissions.

How do I install path-jail?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Plagemes/claude-mods and then /plugin install path-jail@claude-mods.

Is path-jail popular?

Plagemes/claude-mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 15 October 2026.

More workflow mods

nudge-pack

3

baselane-sh/mods

Two turn-end reminders in one mod: test-reminder and ctx-nudge.

Workflow mods/plugin install

path-shorten

3

baselane-sh/mods

Tool rows draw long absolute file paths shorter: the project root as ./ and your home folder as ~. Display only; Bash commands are drawn as they ran.

Workflow mods/plugin install

node-version-check

3

Plagemes/claude-mods

Warns when your Node version doesn't match .nvmrc, .node-version or package.json engines.

Workflow mods/plugin install

pirate-mode

3

baselane-sh/mods

Talks like a pirate in prose, never inside code, commands or file contents.

Workflow mods/plugin install

no-sycophancy

3

baselane-sh/mods

No flattery or filler. Disagreement is stated plainly, with the reason.

Workflow mods/plugin install

port-check

3

Plagemes/claude-mods

Before a dev server starts, tells you if the port is already taken and by which process.

Workflow mods/plugin install

Browse the most popular Claude Code mods, all workflow mods, or the skills and MCP server directories.