Claude Code mod

sandbox-guard

Denies Edit/Write/Bash writes to Claude config paths the sandbox cannot write (settings, skills, plugins, hooks, projects, ...) and tells Claude to hand the user a ready Terminal command instead of trying workarounds.

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add oleksandrkodua/qa-mods
/plugin install sandbox-guard@qa-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L1Reads: reads env vars
Sees
Edit|Write calls, Bash calls
Hooks
session.starttool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
oleksandrkodua/qa-mods
Folder
sandbox-guard
Marketplace
qa-mods
Author
noaod
Type
Guard & safety mods
Last updated
31 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is sandbox-guard?

Denies Edit/Write/Bash writes to Claude config paths the sandbox cannot write (settings, skills, plugins, hooks, projects, ...) and tells Claude to hand the user a ready Terminal command instead of trying workarounds. It is a mod for Claude Code, from oleksandrkodua/qa-mods on GitHub.

What can the sandbox-guard mod access?

Its widest reach is "reads" (reads env vars). It sees Edit|Write calls, Bash calls. Like any mod, it runs with your permissions.

How do I install sandbox-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add oleksandrkodua/qa-mods and then /plugin install sandbox-guard@qa-mods.

More guard & safety mods

rm-guard

vincentlauriat/ModsTools

Asks the user before destructive Bash commands run: rm -rf, git reset --hard, git clean -f, discarding all changes, SQL DROP/TRUNCATE, find -delete, mkfs, dd onto a device

Guard & safety mods

security-guard

UsamaSadiq/claude-mods

Checks git commit and PR commands against the rules in your own and the project's CLAUDE.md files

Guard & safety mods/plugin install

prompt-guard

AbyssCN/claude-lead-harness

Stops prompts that contain API keys or passwords (puts a redacted copy back in the input box) and drops the same message re-sent within a few minutes.

Guard & safety mods/plugin install

transcript-fx

LegendSilvia/claude-code-mods

Gold tool blocks, teal prompt panels, an animated spinner bar and a rainbow turn footer in the transcript

Guard & safety mods/plugin install

permissions

danielmalka/malka-claude-mods

Shows the permission mode and picks the one new sessions start in (permissions.defaultMode). Does nothing until you pick something.

Guard & safety mods/plugin install

mem-guard

3

schreibse/claude-code-mods

Bash memory rules: Node commands run in claude-cmd.slice, and runs that would starve the machine are refused

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.