Claude Code mod

workspace-guard

Enforces Egg's CLAUDE.md hard rules on Bash: account isolation, push protocol, Vercel D8 prebuilt, no --no-verify.

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add EggmanPDX/claude-mods
/plugin install workspace-guard@egg-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L0Draws and remembers
Sees
Bash calls
Hooks
tool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Folder
mods/workspace-guard
Marketplace
egg-mods
Author
Gregg Eiler
Last updated
10 October 2026

FAQ

What is workspace-guard?

Enforces Egg's CLAUDE.md hard rules on Bash: account isolation, push protocol, Vercel D8 prebuilt, no --no-verify. It is a mod for Claude Code, from EggmanPDX/claude-mods on GitHub.

What can the workspace-guard mod access?

Its widest reach is "draws and remembers". It sees Bash calls. Like any mod, it runs with your permissions.

How do I install workspace-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add EggmanPDX/claude-mods and then /plugin install workspace-guard@egg-mods.

More guard & safety mods

workspace-guard

atsusta/workspace-guard-mod

Blocks reading .gitignore and creating venvs or heavy media inside the Syncthing-synced claude-code workspace.

Guard & safety mods/plugin install

x-mod-guard

dvakatsiienko/frame

reads every Bash call, fork spawn and Write before it runs: a Write over a tracked file the session never read, a floor command, a system, overwrite, prune or remote-delete command, a known hazard shape, a coder spawn whose brief has no x brief check stamp, or a fork with no why-fork line is refused with its safe door, never a dialog; each refusal and escape is kept in its own store as an event and a per-day count, which x-mod-stash's band reads as its counter row

Guard & safety mods

witness

iniphi/witness

Keeps a ledger of what you asked for and counts it done only on evidence: claims stay pale until a read-back confirms them, bare SQL UPDATE or DELETE writes are held for your answer, and a print of what was and was not witnessed goes into the session log.

Guard & safety mods/plugin install

xcode-status

narrowstacks/claude-code-mods

In Xcode projects only: one line with the last build and test result and the booted simulator; flags 0-test runs; blocks a second xcodebuild while one runs

Guard & safety mods/plugin install

viz

jjaskulis/claude-code-viz

Teaches the model a small visual vocabulary (```viz blocks) and draws those blocks in its replies as real layouts

Guard & safety mods

dialog-timeout

3

federbenjamin/dialog-timeout

Ends a turn left on an open dialog (permission prompt, question) for 30 min by default and tells the agent the user is /afk; /dialog-timeout <minutes>|off|on

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.