claude

guardrails

PreToolUse Bash guard for Claude Code that still holds under --dangerously-skip-permissions. Blocks pipe-to-shell installs, disk wipes and fork bombs; asks before rm -rf, force-push, git reset --hard, DROP/TRUNCATE, kubectl delete, cloud deletes and secret-file reads. 15 rules, each off/ask/block; a project's own config can only tighten them, loosening comes only from your config outside the project. Plus a PostToolUse audit log with secrets redacted and /guardrails:self-test to see every decision without running anything.

3,741 on GitHubby choiyounggiv1.2.4MITupdated 2 days agosecurity
/

Plugin guardrails from marketplace buildwithclaude in davepoon/buildwithclaude. Commands read from the repo's manifest — yesterday.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • self-test

    Prove the guardrails Bash guard is live — runs a simulation that feeds representative dangerous commands (curl|sh, rm -rf, DROP TABLE, kubectl delete, cloud deletes, …) through the real guard and shows the block/ask decision for each, WITHOUT executing any of them. Use when asked to verify the guard

Hooks (2)

  • PreToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/bash-guard.sh"

  • PostToolUse

    bash "${CLAUDE_PLUGIN_ROOT}/hooks/audit-log.sh"

View source on GitHub buildwithclaude.com

More from davepoon/buildwithclaude

All 277 plugins →

all-skills

claude

Complete collection of ~110 Claude Code skills across document processing, development, automation, CRM, DevOps, and more

200 skills

3,741

all-commands

claude

Complete collection of 174 slash commands across 22 categories

177 commands

3,741

all-agents

claude

Complete collection of 117 specialized AI agents across 11 categories

117 agents

3,741

gsd

claude

Get Shit Done -- a structured workflow plugin for Claude Code that adds planning, execution, and verification commands with MCP-backed project state

83 skills · 33 agents · 1 MCP server

3,741

forge

claude

Full-lifecycle SDLC orchestrator: a 12-stage pipeline (SRS, architecture, spec, plan, build, eval, deploy, monitor, release) driven by specialized agents, persistent cross-session memory, auto-reflection, gate enforcement, and semantic skill mining that proposes new skills from recurring workflows.

45 skills · 27 agents · hooks

3,741

suede-skills

claudecodex

74 skills for Claude Code and Codex. A build DAG researches your repo, fans out disjoint lanes, and refutes its own review before anything lands. A blunt A-F ship grade blocks the bad merge instead of complimenting it. The same folder designs the page, writes the copy, and ships native iOS and Android builds.

70 skills · 1 MCP server

3,741

Similar plugins

CMEM Pro

claude

CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents

3 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

mempalace

claudecodex

AI memory system — mine projects and conversations into a searchable palace. 47 MCP tools, auto-save hooks, guided setup.

3 skills · 6 commands · 1 MCP server · hooks

MemPalace/mempalace 60,536

pensyve

claude

Universal memory runtime for Claude Code with cross-session memory, entity-aware recall, lifecycle hooks, skills, commands, and memory-curator agents

7 skills · 7 commands · 2 agents · hooks

wshobson/agents 42,461

prowler

claude

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server

prowler-cloud/prowler 15,234

worktrunk

claudecodex

Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows. This plugin provides configuration guidance (LLM commit messages, project hooks, worktree paths), automatic activity tracking (🤖/💬 indicators in `wt list` showing active Claude sessions), and a `/wt-diff` pane showing each worktree's changes.

2 skills · hooks

max-sixty/worktrunk 12,481

improve

claude

Point it at a codebase and it figures out what's worth doing — bugs, perf, tech debt, what to build next — then writes plans any agent can execute. It can hand the work to a cheaper model and review the result. It never edits your code.

1 skill

shadcn/improve 11,576

Maintain guardrails?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins277 plugins