Claude Code mod

workflow-opus-guard

Under a Fable or Mythos main loop, deny Workflow scripts whose agent() calls do not pin model: 'opus'.

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.319 Source

Install

Inside Claude Code
/plugin marketplace add SipengXie2024/claude-mods
/plugin install workflow-opus-guard@sipeng-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L1Reads: reads files
Sees
Workflow calls
Hooks
tool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
SipengXie2024/claude-mods
Folder
mods/workflow-opus-guard
Marketplace
sipeng-mods
Author
sipeng
Type
Guard & safety mods
Last updated
6 November 2026
Listed in
awesome-claude-code-mods

FAQ

What is workflow-opus-guard?

Under a Fable or Mythos main loop, deny Workflow scripts whose agent() calls do not pin model: 'opus'. It is a mod for Claude Code, from SipengXie2024/claude-mods on GitHub.

What can the workflow-opus-guard mod access?

Its widest reach is "reads" (reads files). It sees Workflow calls. Like any mod, it runs with your permissions.

How do I install workflow-opus-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add SipengXie2024/claude-mods and then /plugin install workflow-opus-guard@sipeng-mods.

More guard & safety mods

redact

aecheman27-gif/claude-mods

Redacts secrets and PII from every row Claude Code stores and from the CLAUDE.md and memory context, before the model reads it and before the transcript keeps it. Restores a value only into a file that already holds it. No network, no processes, no file writes.

Guard & safety mods/plugin install

beads-guard

3

baselane-sh/mods

Asks before bd commands that delete data or rewrite history: delete, purge, prune, gc, sql, admin, import, rename, forget, restore, migrate and more. Reads only the command text, runs no bd.

Guard & safety mods/plugin install

publish-guard

pomesaka/dotclaude

Before the agent pushes from a repository that has scripts/check-public.sh, runs that check and blocks the push when it finds names or keys that must not be published

Guard & safety mods/plugin install

needs-you

1

Akash001uts/claude-mods

Messages you on Slack when Claude has been waiting on you for a while (a finished turn, a permission prompt, a question); reply there and the session carries on

Guard & safety mods/plugin install

cortex-guard

cdeust/claude-mods

Two rules no settings hook enforces, refused at the tool call: wiki pages and their generated ADR mirrors are written only through the Cortex wiki tool, and every git worktree lives at <repo>/.claude/worktrees/<name>/ (one created there is registered with disk_hygiene.py).

Guard & safety mods/plugin install

prod-guard

5

Plagemes/claude-mods

Stops production-affecting commands (terraform apply, kubectl on prod, DROP TABLE) unless explicitly allowed.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.