Claude Code mod
x-mod-guard
reads every Bash call, fork spawn and Write before it runs: a Write over a tracked file the session never read, a floor command, a system, overwrite, prune or remote-delete command, a known hazard shape, a coder spawn whose brief has no x brief check stamp, or a fork with no why-fork line is refused with its safe door, never a dialog; each refusal and escape is kept in its own store as an event and a per-day count, which x-mod-stash's band reads as its counter row
Install
git clone https://github.com/dvakatsiienko/frame.git
claude --plugin-dir ./frame/home/.claude/plugin-x/mods/x-mod-guardThe repo has no marketplace file, so load the plugin folder directly with --plugin-dir.
What it can access
- Reach
- L2Writes or runs: runs processes, reads files, reads env vars, reads mod state, persists state, draws
- Sees
- /"^(Bash|Monitor)$"/ calls, /"^(Edit|Write|MultiEdit)$"/ calls, Read calls, /"^(Edit|MultiEdit|Write)$"/ calls, /"^(Read|Edit|MultiEdit|Write)$"/ calls, SendMessage calls, every prompt, every tool call, subagent spawns
- Hooks
tool.callprompt.submitturn.completeagent.spawn
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- dvakatsiienko/frame
- Folder
home/.claude/plugin-x/mods/x-mod-guard- License
- MIT
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is x-mod-guard?
reads every Bash call, fork spawn and Write before it runs: a Write over a tracked file the session never read, a floor command, a system, overwrite, prune or remote-delete command, a known hazard shape, a coder spawn whose brief has no x brief check stamp, or a fork with no why-fork line is refused with its safe door, never a dialog; each refusal and escape is kept in its own store as an event and a per-day count, which x-mod-stash's band reads as its counter row It is a mod for Claude Code, from dvakatsiienko/frame on GitHub.
What can the x-mod-guard mod access?
Its widest reach is "writes or runs" (runs processes, reads files, reads env vars, reads mod state, persists state, draws). It sees /"^(Bash|Monitor)$"/ calls, /"^(Edit|Write|MultiEdit)$"/ calls, Read calls, /"^(Edit|MultiEdit|Write)$"/ calls, /"^(Read|Edit|MultiEdit|Write)$"/ calls, SendMessage calls, every prompt, every tool call, subagent spawns. Like any mod, it runs with your permissions.
How do I install x-mod-guard?
Clone dvakatsiienko/frame and start Claude Code with --plugin-dir pointing at the mod's folder (home/.claude/plugin-x/mods/x-mod-guard).
More guard & safety mods
workspace-guard
EggmanPDX/claude-mods
Enforces Egg's CLAUDE.md hard rules on Bash: account isolation, push protocol, Vercel D8 prebuilt, no --no-verify.
xcode-status
narrowstacks/claude-code-mods
In Xcode projects only: one line with the last build and test result and the booted simulator; flags 0-test runs; blocks a second xcodebuild while one runs
workspace-guard
atsusta/workspace-guard-mod
Blocks reading .gitignore and creating venvs or heavy media inside the Syncthing-synced claude-code workspace.
dialog-timeout
3federbenjamin/dialog-timeout
Ends a turn left on an open dialog (permission prompt, question) for 30 min by default and tells the agent the user is /afk; /dialog-timeout <minutes>|off|on
witness
iniphi/witness
Keeps a ledger of what you asked for and counts it done only on evidence: claims stay pale until a read-back confirms them, bare SQL UPDATE or DELETE writes are held for your answer, and a print of what was and was not witnessed goes into the session log.
decision-popup
8Szotasz/claude-mods
Decision popup: Claude asks every decision (approve/refuse, A or B, irreversible steps) as a one-key question, drawn in a framed popup; guard mods' questions get a red frame. /dontes toggles. Hungarian or English.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.