Claude Code mod
shell-guard
Blocks shell commands that wipe your home folder, the project, disks, protected branches or databases, and snapshots uncommitted work to a git ref before commands that would destroy it.
Install
/plugin marketplace add Jvrd97/claude-shell-guard
/plugin install shell-guard@shell-guardMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads env vars, reads mod state, draws
- Sees
- Bash calls
- Hooks
session.starttool.calltool.checkcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- Jvrd97/claude-shell-guard
- Folder
.- Marketplace
shell-guard- Author
- Daniil Bystrov
- License
- MIT
- Last updated
- 6 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is shell-guard?
Blocks shell commands that wipe your home folder, the project, disks, protected branches or databases, and snapshots uncommitted work to a git ref before commands that would destroy it. It is a mod for Claude Code, from Jvrd97/claude-shell-guard on GitHub.
What can the shell-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads env vars, reads mod state, draws). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install shell-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Jvrd97/claude-shell-guard and then /plugin install shell-guard@shell-guard.
More guard & safety mods
shared-repo-guard
naoanao/shared-repo-guard
For repos where several AI agents (or you and an agent) work in the same folder: stops secret values from leaving your .env, pushes to public remotes, and git commands that would wipe work this session did not write.
shell-guard
wcampbell-dw/claude-plugins
Refuses Bash and PowerShell commands that break on Windows, installs az shims that skip cmd.exe, and adds Windows shell rules to the system prompt
session-guardian
A-rdit/session-guardian
Keeps long sessions cheap and easy to pick up: warns before a session's cache goes cold and what coming back costs, nudges a wrap-up past a set size, saves a quiet session's state by itself before its cache goes cold, holds a command that keeps failing, and adds /wrapup, which also saves the session's dead ends.
shell-guard
youllook/ClaudeMods
Windows shell guard: fixes backslash drive paths in Bash, blocks quote-eating node -e / heredoc patterns, and catches PowerShell/Bash syntax sent to the wrong shell or PowerShell regex escaping in double quotes
sensitive-guard
G1TS23/sensitive-guard
Garde-fou : suspend les commandes Bash sensibles et demande Proceed / Cancel dans un panneau avant exécution.
side-bet
sreshtalluri/claude-mods
A play-money prediction market on your own Claude session: bet on tests, files touched and permission asks each turn.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.