Claude Code mod
publish-guard
Before the agent pushes from a repository that has scripts/check-public.sh, runs that check and blocks the push when it finds names or keys that must not be published
Install
/plugin marketplace add pomesaka/dotclaude
/plugin install publish-guard@dotclaudeMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes
- Sees
- Bash calls
- Hooks
tool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- pomesaka/dotclaude
- Folder
mods/publish-guard- Marketplace
dotclaude- Author
- pomesaka
- Last updated
- 29 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is publish-guard?
Before the agent pushes from a repository that has scripts/check-public.sh, runs that check and blocks the push when it finds names or keys that must not be published It is a mod for Claude Code, from pomesaka/dotclaude on GitHub.
What can the publish-guard mod access?
Its widest reach is "writes or runs" (runs processes). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install publish-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add pomesaka/dotclaude and then /plugin install publish-guard@dotclaude.
More guard & safety mods
cortex-guard
cdeust/claude-mods
Two rules no settings hook enforces, refused at the tool call: wiki pages and their generated ADR mirrors are written only through the Cortex wiki tool, and every git worktree lives at <repo>/.claude/worktrees/<name>/ (one created there is registered with disk_hygiene.py).
redact
aecheman27-gif/claude-mods
Redacts secrets and PII from every row Claude Code stores and from the CLAUDE.md and memory context, before the model reads it and before the transcript keeps it. Restores a value only into a file that already holds it. No network, no processes, no file writes.
blast-radius
harshitmywork17/claude-mods
Catches risky shell commands (rm -rf, git reset --hard, force push, ...) before they run, forces a permission prompt, and shows what they would touch in a side pane.
beads-guard
3baselane-sh/mods
Asks before bd commands that delete data or rewrite history: delete, purge, prune, gc, sql, admin, import, rename, forget, restore, migrate and more. Reads only the command text, runs no bd.
open-file-guard
3seanrobertwright/claude-mods
Before Claude uses a Word, Excel or PowerPoint file you have open, asks you to close it instead of letting the write fail.
needs-you
1Akash001uts/claude-mods
Messages you on Slack when Claude has been waiting on you for a while (a finished turn, a permission prompt, a question); reply there and the session carries on
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.