Claude Code mod
shell-edit-guard
Blocks Bash commands that write files (inline scripts, sed -i, redirects, tee) and points the model at Edit/Write instead
Install
/plugin marketplace add daviddecorso/claude-mods
/plugin install shell-edit-guard@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads env vars, reads mod state
- Sees
- every tool call
- Hooks
session.startcommand.runturn.startturn.completetool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- daviddecorso/claude-mods
- Folder
shell-edit-guard- Marketplace
claude-mods- Author
- David DeCorso
- License
- MIT
- Last updated
- 19 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is shell-edit-guard?
Blocks Bash commands that write files (inline scripts, sed -i, redirects, tee) and points the model at Edit/Write instead It is a mod for Claude Code, from daviddecorso/claude-mods on GitHub.
What can the shell-edit-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads env vars, reads mod state). It sees every tool call. Like any mod, it runs with your permissions.
How do I install shell-edit-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add daviddecorso/claude-mods and then /plugin install shell-edit-guard@claude-mods.
More guard & safety mods
session-fleet
bennewton999/claude-code-mods
Fleet board of live sessions, a needs-you beacon, and a worktree claim guard, shared across sessions
verification-guard
oleksandrkodua/qa-mods
Checks Claude's claims (tests pass, verified, fixed, no regression, API returns N) against the tool calls that actually ran. Unsupported claims get a visible warning; /evidence lists claims and the evidence behind each. Warns only, never blocks.
repo-sentry
jgilb17/claude-mods
Status line with business, repo, branch and dirty count, plus a warning band when on main or a secret file is staged
x-mod-redact
dvakatsiienko/frame
keeps secrets out of every transcript: api keys, tokens and private keys read as a stable placeholder in every kept row, and come back only inside the tool call that names them
released-objects
alokm3hta-star/Claude-Mods
Flag SAP objects in ABAP code that are not released, deprecated or have no API, with SAP's successor, using SAP's own release lists. It flags, never blocks.
guard-devops
3baselane-sh/mods
Asks before harsh DevOps commands: destructive Docker, Kubernetes and Helm calls, CI config edits, broad chmod and chown, and git commands that lose work. Add infra-guard for plain kubectl delete.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.