publish-guard

Mar5929/claude-toolkit

Required workflow checks with Claude Code function hooks. Refuses a knowledge-file write, or a memory-service save in external memory mode, until knowledge-save is open, refuses hand edits to generated indexes, refuses a pull request, close or merge until knowledge-save (and the work or merge-and-clean-up skill) is open, and holds a final reply once when working memory or the index rebuild and checker did not follow the change. Fact checks only: no model call and no reading of the agent's words. Runs only when CLAUDE_CODE_ENABLE_FUNCTION_HOOKS=1.

kk5190/claude-code-mods

Blocks git push and gh pr create until you confirm the commits, their authors and the diff size, with a side pane of the last check

cprentice9/ccmods

Blocks em dashes in edits, shell commands and replies, and British spellings in prose files, commit messages and pull requests.

ccdwyer/quarantine

Wraps web, MCP and third-party tool output as untrusted data and defangs prompt-injection lines before the model reads them

ezoushen/claude-mods

Replaces secrets and credentials with stable placeholders inside Claude Code before the model or the session file ever sees them — prompts, tool results and replies, plus attachments and compaction summaries where the platform lets this mod see them — and restores real values only in Edit/Write/NotebookEdit arguments. 220-rule corpus plus checksum detectors, a benign-shape allowlist, fail-closed scanning, a /redact pane and a redacted-values skill. No network, no subprocess, no model call.

nu0ma/query-guard

Asks before Claude runs destructive or slow-looking SQL through a DB CLI: DELETE, UPDATE without WHERE, DROP, TRUNCATE, full scans and cartesian joins.