Safety plugins

Rule-based allow/deny/ask on every tool call, per-session limits, loop detection, and a full audit trail.

1 skill · 3 commands · hooks

Gate every Claude Code tool call through Guardian Angel.

2 skills · hooks

10 safety hooks + 5 templates from 140+ hours of autonomous Claude Code operation. Context monitoring, syntax checking, branch protection, activity logging, and more.

2 skills · hooks

Stop AI coding agents from accidentally emptying your database. Ships an always-on hook that blocks destructive DB commands (DROP, TRUNCATE, DELETE-without-WHERE, migrate:fresh, db:drop, prisma migrate reset, FLUSHALL, docker compose down -v and more) across 15+ frameworks, plus a stack-aware installer for database-level privilege separation and framework boot guards.

1 skill · hooks

Claude Code hooks (public, maintained separately by its author; needs your own TypeSafe key) backed by TypeSafe's Jev: a Bash and edit risk gate, subagent model routing, subagent verification, a stop self-check, loop detection and compaction triage.

1 skill · hooks

Blocks edits to generated files and frozen snapshots, keeps secret literals out of committed files, and flags stale builds. Driven by a per-repo .claude/guard.json; inert without one.

hooks

Blocks dangerous git commands (force-push, amend, reset --hard, etc.) for all agents

hooks

Asks for confirmation when entering plan mode with a non-Opus model

hooks

Claude Code hooks (public, maintained separately by its author; needs your own TypeSafe key) backed by TypeSafe's Jev: a Bash and edit risk gate, subagent model routing, subagent verification, a stop self-check, loop detection and compaction triage.

1 skill

Warns once per session when a tool payload is about to launch another browser, or fan work out in parallel. Never blocks.

hooks

Safety-first SSH operations — request/execute two-phase writes, redacted output by default, workdir sandbox, detached long-running jobs. The slow lane.

1 skill

A PreToolUse hook that reads each Bash command and denies git commands that stage the whole tree, switch off git hooks or destroy work.

hooks

Deterministic PreToolUse guards: secret detection, dangerous commands, branch protection, prompt injection, MCP allowlisting.

Gates risky tool calls: rules decide the tier, model reviewers give a second opinion, anything uncertain comes to you.

Blocks git commit/push when the change holds secrets, keys, .env files or giant files.