Claude Code mod
pkexec-guard
Routes `sudo` in Bash calls to a password prompt the person can answer: pkexec on a Linux desktop, an osascript administrator dialog on macOS, and Windows sudo's UAC prompt on Windows.
Install
/plugin marketplace add joshkerr/claude-mods
/plugin install pkexec-guard@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads env vars, draws
- Sees
- Bash calls
- Hooks
tool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- joshkerr/claude-mods
- Folder
pkexec-guard- Marketplace
claude-mods- Author
- Josh Kerr
- Last updated
- 30 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is pkexec-guard?
Routes `sudo` in Bash calls to a password prompt the person can answer: pkexec on a Linux desktop, an osascript administrator dialog on macOS, and Windows sudo's UAC prompt on Windows. It is a mod for Claude Code, from joshkerr/claude-mods on GitHub.
What can the pkexec-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads env vars, draws). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install pkexec-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add joshkerr/claude-mods and then /plugin install pkexec-guard@claude-mods.
More guard & safety mods
pii-shield
Jiang-Yude/pii-shield
Replace protected people's names, Taiwan ID numbers, phone numbers and emails with placeholders before the model reads them.
polish
HuliLulu46/polish
/polish <text>: rewrites it into a clearer prompt and leaves the result in the input box for you to confirm
out-to-lunch
jambolo/claude-mods
Shows what Claude is doing right now and why it is taking long: API wait, thinking, a slow tool, a permission prompt, subagents, compaction.
port-guard
colorfield/claude-port-guard
Stops Claude from killing, or running E2E tests against, another project's local dev server
nvda-status
lbk2907/nvda-status
Claude Code for NVDA users on Windows: spoken announcements (finished, question, permission, background task), /time, /read and /quiet, a status line with working time and tokens, and a popup to answer Claude's questions from any app
prompt-redact
ezoushen/claude-mods
Replaces secrets and credentials with stable placeholders inside Claude Code before the model or the session file ever sees them — prompts, tool results and replies, plus attachments and compaction summaries where the platform lets this mod see them — and restores real values only in Edit/Write/NotebookEdit arguments. 220-rule corpus plus checksum detectors, a benign-shape allowlist, fail-closed scanning, a /redact pane and a redacted-values skill. No network, no subprocess, no model call.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.