Claude Code mod

promptsign

Verifies signatures on the instruction files Claude Code loads, meaning CLAUDE.md, skills, and agent definitions, before they reach model context. It re-checks a skill bundle before the Skill tool runs it. Sigstore keyless, offline verification against a pinned trust root, no telemetry.

Context & usage mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add PromptSign/promptsign-plugin
/plugin install promptsign@promptsign

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L2Writes or runs: runs processes, reads env vars, draws
Sees
every skill, the system prompt
Hooks
skill.promptprompt.contextplugin.register

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Folder
.
Marketplace
promptsign
Author
Sergey Vasilevskiy
License
Apache-2.0
Last updated
24 October 2026

FAQ

What is promptsign?

Verifies signatures on the instruction files Claude Code loads, meaning CLAUDE.md, skills, and agent definitions, before they reach model context. It re-checks a skill bundle before the Skill tool runs it. Sigstore keyless, offline verification against a pinned trust root, no telemetry. It is a mod for Claude Code, from PromptSign/promptsign-plugin on GitHub.

What can the promptsign mod access?

Its widest reach is "writes or runs" (runs processes, reads env vars, draws). It sees every skill, the system prompt. Like any mod, it runs with your permissions.

How do I install promptsign?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add PromptSign/promptsign-plugin and then /plugin install promptsign@promptsign.

More context & usage mods

Browse the most popular Claude Code mods, all context & usage mods, or the skills and MCP server directories.