Claude Code mod
ssh-guard
Refuses ssh/scp/rsync to hosts listed in memory decommissioned_hosts.md; "# decommissioned-ok" overrides.
Install
/plugin marketplace add escapeboy/claude-code-kit
/plugin install ssh-guard@ai-prompts-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads files, reads env vars
- Sees
- Bash calls
- Hooks
session.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- escapeboy/claude-code-kit
- Folder
17-mods/marketplace/mods/ssh-guard- Marketplace
ai-prompts-mods- Author
- escapeboy
- License
- MIT
- Last updated
- 9 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is ssh-guard?
Refuses ssh/scp/rsync to hosts listed in memory decommissioned_hosts.md; "# decommissioned-ok" overrides. It is a mod for Claude Code, from escapeboy/claude-code-kit on GitHub.
What can the ssh-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads files, reads env vars). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install ssh-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add escapeboy/claude-code-kit and then /plugin install ssh-guard@ai-prompts-mods.
Is ssh-guard popular?
escapeboy/claude-code-kit has 97 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 9 October 2026.
More guard & safety mods
launch-codes
25OneWave-AI/claude-code-mods
Dangerous Bash commands need launch codes: red alert pane, siren, a code to arm and a LAUNCH to fire
collision-guard
5ahmadhammoud56/MOAA
Stops two Claude chats from overwriting each other's files: shared, self-expiring file claims across sessions, with worktree and team-board suggestions
display-redaction
28melodic-software/claude-code-plugins
A mod that masks email addresses and secret-shaped text in what Claude Code draws, for recordings and screen shares. It changes the screen only; the transcript, the model's context and the files on disk are untouched, so it is not a privacy or data control.
secret-guard
5partalemre/MODZ
Stops secrets before they land: scans Write/Edit and git add/commit for keys and tokens, blocks git add of .env, keeps pasted keys out of the chat as placeholders, /rec masks the screen; a card with masked values, then Move keys to .env, Allow once or Cancel (Turkish with MODZ_LANG=tr)
jev-skill-suggestion
101ray-amjad/claude-code-mods
Scores every skill against your prompt with TypeSafe Jev as you type; observe, block or steer skill loading
bash-guard
4Singh-AP/awesome-claude-mods
A seatbelt for YOLO mode: blocks catastrophic shell commands (rm -rf ~, mkfs, dd to a disk, fork bombs) and asks before risky ones (force-push, reset --hard, DROP TABLE, curl | sh), even with permissions bypassed.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.