Claude Code mod
sensitive-guard
Garde-fou : suspend les commandes Bash sensibles et demande Proceed / Cancel dans un panneau avant exécution.
Install
/plugin marketplace add G1TS23/sensitive-guard
/plugin install sensitive-guard@sensitive-guardMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads mod state, draws
- Sees
- Bash calls
- Draws in
PaneAbovePrompt- Hooks
tool.callui.render
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- G1TS23/sensitive-guard
- Folder
.- Marketplace
sensitive-guard- Author
- Olivier Falahi
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is sensitive-guard?
Garde-fou : suspend les commandes Bash sensibles et demande Proceed / Cancel dans un panneau avant exécution. It is a mod for Claude Code, from G1TS23/sensitive-guard on GitHub.
What can the sensitive-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads mod state, draws). It sees Bash calls. It draws in Pane, AbovePrompt. Like any mod, it runs with your permissions.
How do I install sensitive-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add G1TS23/sensitive-guard and then /plugin install sensitive-guard@sensitive-guard.
More guard & safety mods
secrets-redactor
lakmadev/claude-mods
Scrubs API keys, tokens and private keys from prompts and tool output before the model sees them.
session-guardian
A-rdit/session-guardian
Keeps long sessions cheap and easy to pick up: warns before a session's cache goes cold and what coming back costs, nudges a wrap-up past a set size, saves a quiet session's state by itself before its cache goes cold, holds a command that keeps failing, and adds /wrapup, which also saves the session's dead ends.
secret-vault
gcamara/secret-vault
Collects API keys and other secrets in a private modal and writes them straight to their target file, redacting them from the session.
shared-repo-guard
naoanao/shared-repo-guard
For repos where several AI agents (or you and an agent) work in the same folder: stops secret values from leaving your .env, pushes to public remotes, and git commands that would wipe work this session did not write.
secret-sentry
ccdwyer/secret-sentry
Two-way secret scrubbing: redacts credentials before the model sees them and blocks writing them into tracked files or shell commands
shell-guard
Jvrd97/claude-shell-guard
Blocks shell commands that wipe your home folder, the project, disks, protected branches or databases, and snapshots uncommitted work to a git ref before commands that would destroy it.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.