Claude Code mod
tunnel-guard
Asks before a command that exposes your machine to the internet: ngrok, cloudflared, ssh -R, tailscale funnel, a dev server on 0.0.0.0
Install
/plugin marketplace add MatheusChiodi/cockpit
/plugin install tunnel-guard@cockpitMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads mod state
- Hooks
tool.check
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- MatheusChiodi/cockpit
- Folder
mods/tunnel-guard- Marketplace
cockpit- Author
- Matheus Chiodi
- License
- MIT
- Last updated
- 18 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is tunnel-guard?
Asks before a command that exposes your machine to the internet: ngrok, cloudflared, ssh -R, tailscale funnel, a dev server on 0.0.0.0 It is a mod for Claude Code, from MatheusChiodi/cockpit on GitHub.
What can the tunnel-guard mod access?
Its widest reach is "reads" (reads mod state). Like any mod, it runs with your permissions.
How do I install tunnel-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add MatheusChiodi/cockpit and then /plugin install tunnel-guard@cockpit.
Is tunnel-guard popular?
MatheusChiodi/cockpit has 1 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 18 October 2026.
More guard & safety mods
statusline
1thefuga/claude-x
A vim-style status bar in the Claude Code footer: editor mode, permission mode, model, effort, git state, usage and cursor; numbers the draft's lines and keeps the prompt box taller.
wt-secret-guard
1home-dev-lab/workflow-toolbox
Function-hook secret scrubber for prompts, assistant text, tool results, and raw outbound tool inputs
secret-guard
1Wowbagger1994/claude-mods
Oscura i segreti (token, chiavi, password) nei risultati degli strumenti prima che Claude li legga
plan
18bendrucker/claude
Planning mode guidelines and context injection
pkg-guard
1MDmubarak786/claude-mods
Hold npm, pnpm, yarn, pip, uv, and cargo installs of packages that don't exist, are brand new, or are barely downloaded, with the registry facts in the question. Catches hallucinated and typosquat packages before they land.
net-guard
4Singh-AP/awesome-claude-mods
Stops data exfiltration and surprise network calls: checks every curl, wget, ssh, scp, git push and WebFetch against allow and deny lists, and asks before data goes to a host you haven't approved.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.