Claude Code mod
sec-default
Security default for organizations: seated outermost, it keeps the organization's classic hooks, prompt content, settings, tool policy and pinned environment out of reach of the plugins a person installs, and adds no policy of its own; one managed option, allowManagedModsOnly, limits mods to the organization's.
Install
/pluginThis mod ships with Claude Code. Turn it on or off from /plugin.
What it can access
- Reach
- L1Reads: reads settings, draws
- Sees
- classic hooks, the system prompt, every skill, compaction, subagent spawns
- Hooks
classic.*prompt.sectionprompt.contextprompt.attachmentprompt.composeskill.promptattribution.textsession.appendsession.compactsettings.readtool.describecommand.describeagent.offeragent.spawntool.registertool.listtool.checkui.logenv.getenv.setplugin.register
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- anthropics/claude-code
- Folder
mods/sec-default- Author
- Anthropic
- Type
- Workflow mods
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is sec-default?
Security default for organizations: seated outermost, it keeps the organization's classic hooks, prompt content, settings, tool policy and pinned environment out of reach of the plugins a person installs, and adds no policy of its own; one managed option, allowManagedModsOnly, limits mods to the organization's. It is a mod for Claude Code, from anthropics/claude-code on GitHub.
What can the sec-default mod access?
Its widest reach is "reads" (reads settings, draws). It sees classic hooks, the system prompt, every skill, compaction, subagent spawns. Like any mod, it runs with your permissions.
How do I install sec-default?
Clone anthropics/claude-code and start Claude Code with --plugin-dir pointing at the mod's folder (mods/sec-default).
Is sec-default popular?
anthropics/claude-code has 154,122 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 31 October 2026.
More workflow mods
ruflo-bbs-federation
80kruvnet/ruflo
AgentBBS cross-host agent federation for ruflo (ADR-164). Phase 1 exposes room coordination — federation_bbs_register / federation_bbs_publish / federation_bbs_watch / federation_bbs_human_join. Phase 2 (v3.40.0) adds signed cross-host federation — federation_bbs_identity (persistent Ed25519 node identity), federation_bbs_peer_add (pin a peer by nodeId + public key), federation_bbs_peers (audit/unpin), federation_bbs_serve (read-only pull endpoint), and federation_bbs_sync (pull pinned peers and union-merge what verifies). Every merged envelope is Ed25519-verified against a pinned key; unsigned/misattributed/oversize/over-hop envelopes are dropped and counted. Transport is HTTP pull and works on any network (Tailscale, LAN, VPN, loopback) — no tailnet required. Coordinates work ownership via claim messages (ClaimIssued/Released/Handoff/Ack). agentbbs lives in optionalDependencies; every handler gracefully degrades to {degraded:true} when the package is missing (ADR-150 pattern). As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.
fm
8.5kkunchenguid/firstmate
Firstmate Calm for Claude Code: the sailboat working animation and conversation-only transcript presentation, sharing the per-home config/calm preference with the Pi Calm extension. Its hooks module may load through CLAUDE_CODE_ENABLE_FUNCTION_HOOKS or Claude Code's tengu_plugin_hooks_modules rollout flag, but the mod activates only when CLAUDE_CODE_ENABLE_FUNCTION_HOOKS is exactly 1 and is otherwise a complete no-op.
fast-jev-compaction
7.8ktamaratran/fast-jev-compaction
Verbatim Jev-guided compaction for Claude Code sessions.
ruflo-business-pods
80kruvnet/ruflo
ADR-164 Phase 2 — business-domain pod templates for the federated business autopilot. Ships the sales pod template (templates/sales.json) and a single-tick runner (scripts/pod-tick.mjs) that pre-flights templates via business_pod_validate, reserves budget through a file-based stub ledger (atomic SQLite tracker is Phase 3 per ADR-164.1), resolves each agent role against ruflo's agent registry, constructs dry-run prompts, and posts an envelope summary to the room via federation_bbs_publish. Dry-run by default — --live is reserved for Phase 3 Managed-Agent + claude-p wiring. As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.
caliber-jev-compaction
1.3kcaliber-ai-org/ai-setup
Verbatim Jev-guided compaction for Claude Code sessions.
shared-session
786Paradigm-Study/claude-share
Share a Claude Code session with a link, or with your team. Teammates join from their own Claude Code and talk to it: one session does the work, everyone sees every turn live, and the host approves what runs on their machine. Sign in with GitHub or Google for teams: your team's live sessions, one press to join. Sharing goes through this project's public server unless you set your own (README: Privacy and the public server).
Browse the most popular Claude Code mods, all workflow mods, or the skills and MCP server directories.