Claude Code mod
zsh-safe
Lets Bash commands written for bash run under zsh: unmatched globs, leading =, and a missing timeout
Install
/plugin marketplace add HolyGrail/claude-mods
/plugin install zsh-safe@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: sets env vars, reads env vars
- Sees
- Bash calls
- Hooks
session.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- HolyGrail/claude-mods
- Folder
plugins/zsh-safe- Marketplace
claude-mods- Author
- HolyGrail
- Last updated
- 20 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is zsh-safe?
Lets Bash commands written for bash run under zsh: unmatched globs, leading =, and a missing timeout It is a mod for Claude Code, from HolyGrail/claude-mods on GitHub.
What can the zsh-safe mod access?
Its widest reach is "writes or runs" (sets env vars, reads env vars). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install zsh-safe?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add HolyGrail/claude-mods and then /plugin install zsh-safe@claude-mods.
Is zsh-safe popular?
HolyGrail/claude-mods has 19 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 20 October 2026.
More guard & safety mods
ruflo-protector
80kruvnet/ruflo
Project Anatole: an optional, learning watchdog for unattended agents. Deterministic OWASP-mapped rules, a per-project behavioural baseline, four modes (off, learn, notify, enforce), alerts you can read later.
ruflo-migrations
80kruvnet/ruflo
Schema migration management — generate, validate, dry-run, and rollback database migrations. As a mod (ADR-445): a tighten-only guard on its tools, /migrations-mod, and a status file the console shows
helm
21ersinkoc/claude-mods
KOZMOS Helm: one-press settings profiles in a sidebar. Seven built-in ways of working (Token saver, Fast flow, Max quality, Plan first, Guarded, Autopilot, Quiet focus) plus your own saved setups; each shows exactly what it changes, lets you leave any step out, applies /config rows the way the menu does, saves effort for the model in use at once, and every activation can be undone. /helm toggles it; <profile>, apply <profile>, save <name>, rm <name>, undo, list.
clock-guard
14nekyialabs/claude-code-toolkit
Companion to the clock mod: drops a clock wake that arrives twice for the same firing, which can happen when Claude Code replaces a lost hooks worker and replays a timer's prompt submit. Guard by Ray and Starling.
ruflo-observability
80kruvnet/ruflo
Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry. As a mod (ADR-445): a tighten-only guard on its tools, /observe-mod, and a status file the console shows
ruflo-aidefence
80kruvnet/ruflo
AI safety scanning, PII detection, prompt injection defense, and adaptive threat learning
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.