Claude Code mod
shell-guard
Blocks in-place file mutation via the shell (sed -i, perl -i clusters, awk -i inplace) on the model's tool calls — the Edit tool is the correct way to modify files. Fail-closed; tight default list, extensible in register.ts.
Install
/plugin marketplace add d1820/claude-mods
/plugin install shell-guard@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers
- Sees
- every tool call
- Hooks
tool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- d1820/claude-mods
- Folder
shell-guard- Marketplace
claude-mods- Author
- Dan Turco
- License
- MIT
- Last updated
- 28 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is shell-guard?
Blocks in-place file mutation via the shell (sed -i, perl -i clusters, awk -i inplace) on the model's tool calls — the Edit tool is the correct way to modify files. Fail-closed; tight default list, extensible in register.ts. It is a mod for Claude Code, from d1820/claude-mods on GitHub.
What can the shell-guard mod access?
Its widest reach is "draws and remembers". It sees every tool call. Like any mod, it runs with your permissions.
How do I install shell-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add d1820/claude-mods and then /plugin install shell-guard@claude-mods.
More guard & safety mods
shared-repo-guard
naoanao/shared-repo-guard
For repos where several AI agents (or you and an agent) work in the same folder: stops secret values from leaving your .env, pushes to public remotes, and git commands that would wipe work this session did not write.
shell-guard
Jvrd97/claude-shell-guard
Blocks shell commands that wipe your home folder, the project, disks, protected branches or databases, and snapshots uncommitted work to a git ref before commands that would destroy it.
session-guardian
A-rdit/session-guardian
Keeps long sessions cheap and easy to pick up: warns before a session's cache goes cold and what coming back costs, nudges a wrap-up past a set size, saves a quiet session's state by itself before its cache goes cold, holds a command that keeps failing, and adds /wrapup, which also saves the session's dead ends.
shell-guard
wcampbell-dw/claude-plugins
Refuses Bash and PowerShell commands that break on Windows, installs az shims that skip cmd.exe, and adds Windows shell rules to the system prompt
sensitive-guard
G1TS23/sensitive-guard
Garde-fou : suspend les commandes Bash sensibles et demande Proceed / Cancel dans un panneau avant exécution.
shell-guard
youllook/ClaudeMods
Windows shell guard: fixes backslash drive paths in Bash, blocks quote-eating node -e / heredoc patterns, and catches PowerShell/Bash syntax sent to the wrong shell or PowerShell regex escaping in double quotes
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.