Claude Code mod
ruflo-protector
Project Anatole: an optional, learning watchdog for unattended agents. Deterministic OWASP-mapped rules, a per-project behavioural baseline, four modes (off, learn, notify, enforce), alerts you can read later.
Install
/plugin marketplace add ruvnet/ruflo
/plugin install ruflo-protector@rufloMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: writes files, reads files, draws
- Sees
- subagent spawns
- Hooks
session.startturn.startturn.completesession.endtool.checkagent.spawnsession.receivecommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- ruvnet/ruflo
- Folder
plugins/ruflo-protector- Marketplace
ruflo- Author
- ruvnet
- License
- MIT
- Last updated
- 1 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is ruflo-protector?
Project Anatole: an optional, learning watchdog for unattended agents. Deterministic OWASP-mapped rules, a per-project behavioural baseline, four modes (off, learn, notify, enforce), alerts you can read later. It is a mod for Claude Code, from ruvnet/ruflo on GitHub.
What can the ruflo-protector mod access?
Its widest reach is "writes or runs" (writes files, reads files, draws). It sees subagent spawns. Like any mod, it runs with your permissions.
How do I install ruflo-protector?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add ruvnet/ruflo and then /plugin install ruflo-protector@ruflo.
Is ruflo-protector popular?
ruvnet/ruflo has 80,469 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 1 November 2026.
More guard & safety mods
helm
21ersinkoc/claude-mods
KOZMOS Helm: one-press settings profiles in a sidebar. Seven built-in ways of working (Token saver, Fast flow, Max quality, Plan first, Guarded, Autopilot, Quiet focus) plus your own saved setups; each shows exactly what it changes, lets you leave any step out, applies /config rows the way the menu does, saves effort for the model in use at once, and every activation can be undone. /helm toggles it; <profile>, apply <profile>, save <name>, rm <name>, undo, list.
zsh-safe
19HolyGrail/claude-mods
Lets Bash commands written for bash run under zsh: unmatched globs, leading =, and a missing timeout
ruflo-observability
80kruvnet/ruflo
Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry. As a mod (ADR-445): a tighten-only guard on its tools, /observe-mod, and a status file the console shows
ruflo-migrations
80kruvnet/ruflo
Schema migration management — generate, validate, dry-run, and rollback database migrations. As a mod (ADR-445): a tighten-only guard on its tools, /migrations-mod, and a status file the console shows
prodguard
24ucsandman/Agnostic-AI
PRODUCTION GUARD: ambient project/environment context + a transport-independent policy core (DashClaw evidence classifier + offlocal policy engine) enforced natively on tool.call and tool.check. Blocks, asks, or contains before the command runs. /prodguard
clock-guard
14nekyialabs/claude-code-toolkit
Companion to the clock mod: drops a clock wake that arrives twice for the same firing, which can happen when Claude Code replaces a lost hooks worker and replays a timer's prompt submit. Guard by Ray and Starling.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.