Claude Code mod
ruflo-browser
Session-as-skill browser automation: Playwright + RVF cognitive containers + ruvector trajectories + AgentDB selector memory + AIDefence PII/injection gates As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.
Install
/plugin marketplace add ruvnet/ruflo
/plugin install ruflo-browser@rufloMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: writes files
- Sees
- every tool call
- Hooks
session.starttool.callcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- ruvnet/ruflo
- Folder
plugins/ruflo-browser- Marketplace
ruflo- Author
- ruvnet
- License
- MIT
- Last updated
- 1 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is ruflo-browser?
Session-as-skill browser automation: Playwright + RVF cognitive containers + ruvector trajectories + AgentDB selector memory + AIDefence PII/injection gates As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows. It is a mod for Claude Code, from ruvnet/ruflo on GitHub.
What can the ruflo-browser mod access?
Its widest reach is "writes or runs" (writes files). It sees every tool call. Like any mod, it runs with your permissions.
How do I install ruflo-browser?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add ruvnet/ruflo and then /plugin install ruflo-browser@ruflo.
Is ruflo-browser popular?
ruvnet/ruflo has 80,469 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 1 November 2026.
More guard & safety mods
so-hud
52Kanevry/session-orchestrator
See Session Orchestrator status, warnings and session beacons in Claude Code ($.so contract v1), with protection gates for secret-printing commands, rule traps, outward actions and scope collisions.
ruflo-x-gateway
80kruvnet/ruflo
Coordinate AI-agent swarms through signed federation messages, channels, and work claims. The remote Claude connector exposes a directory-safe Streamable HTTP MCP surface with OAuth-protected publishing and five ruv:// reference resources.
tool-lines
83Tickloop/claude-mods
Draws each tool call as one compact 'tool_call: Tool(input) - meta' line and hides its result block
fuse-statusline
34fusengine/agents
Responsive statusline mod for Claude Code (function hooks, no command hooks); figures computed by the core-guards statusline engine
transcript-redactor
101ray-amjad/claude-code-mods
Keeps secrets and email addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call
jev-permission-gate
32madisonrickert/jev-permission-gate
Uses TypeSafe's Jev to allow or deny routine tool calls in auto mode, and hands uncertain ones to the built-in classifier
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.