claude

guardrails

Mechanical safety guards for agents: hooks that refuse a dangerous command and tell the agent what to do instead. Guards: no inline node/bun eval (-e, -p), which turns any library that forks with execArgv into a fork bomb; no package install inside a git submodule whose packages are workspaces of the superproject, which shadows its dependencies; no command that prints a secret value into the transcript (an env dump under secrets run, a keychain read, the store token, bws secret get)

0 on GitHubby Michał Kędrzyńskiv0.3.0updated yesterdaysecurity
/

Plugin guardrails from marketplace kedrzu-skills in kedrzu/skills. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Hooks (3)

  • PreToolUse

    python3 -I "${CLAUDE_PLUGIN_ROOT}/hooks/block_inline_eval.py"

  • PreToolUse

    python3 -I "${CLAUDE_PLUGIN_ROOT}/hooks/block_submodule_install.py"

  • PreToolUse

    python3 -I "${CLAUDE_PLUGIN_ROOT}/hooks/block_secret_leaks.py"

View source on GitHub

More from kedrzu/skills

All 16 plugins →

dev

claude

Think a feature through with /dev:design, then plan, build, verify and land code changes through one pipeline — /dev:fix, /dev:task, /dev:feature, /dev:build and /dev:deliver — with approval gates, sequential implementers, a subtractive prune pass and stacked PRs. On request, /dev:review fixes what nobody would argue with and posts the rest that survived a refutation pass as inline PR findings, /dev:fix-pr-comments acts on the unresolved PR threads and asks in chat where a fix needs a choice, /dev:review-and-fix loops the two until review calls the branch finished, /dev:explain-pr explains a PR or a whole stacked chain in plain language, and /dev:update-packages updates every dependency in verified batches and flags the deprecated or abandoned ones. Project-specific checks and git flow come from the project's own verify and git-workflow skills, which /dev:setup and /git:setup write

14 skills

0

git

claude

Git operations agents get wrong in ways that silently lose work — resolving merge, rebase and cherry-pick conflicts by both sides' intent, a hook that blocks unnamed stashes, pops by no ref or by position, plain force-pushes and, where a project opts in, pushes to its protected branches, and /git:setup, which writes the project's git-workflow skill and .claude/git.json

2 skills · hooks

0

telegram

claude

One-way Telegram notifications: let the agent reach your phone when you are away from the terminal

2 skills · 1 MCP server

0

Multi-account Google Drive for agents: browse, read Docs as Markdown, download, upload, edit and trash files — each permission switched per project, several Google Cloud apps at once, never deletes permanently

1 skill · 1 MCP server

0

gmail-mcp

claude

Multi-account Gmail for agents: search, read as Markdown, drafts with attachments, label rules — configured per project, several Google Cloud apps at once, never sends

1 skill · 1 MCP server

0

Protocol for effective web research: engine selection, query hygiene, graded negative verdicts and primary-source verification

1 skill · 1 MCP server

0

Similar plugins

CMEM Pro

claude

CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents

3 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

mempalace

claudecodex

AI memory system — mine projects and conversations into a searchable palace. 47 MCP tools, auto-save hooks, guided setup.

3 skills · 6 commands · 1 MCP server · hooks

MemPalace/mempalace 60,536

pensyve

claude

Universal memory runtime for Claude Code with cross-session memory, entity-aware recall, lifecycle hooks, skills, commands, and memory-curator agents

7 skills · 7 commands · 2 agents · hooks

wshobson/agents 42,461

prowler

claude

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server

prowler-cloud/prowler 15,234

worktrunk

claudecodex

Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows. This plugin provides configuration guidance (LLM commit messages, project hooks, worktree paths), automatic activity tracking (🤖/💬 indicators in `wt list` showing active Claude sessions), and a `/wt-diff` pane showing each worktree's changes.

2 skills · hooks

max-sixty/worktrunk 12,481

improve

claude

Point it at a codebase and it figures out what's worth doing — bugs, perf, tech debt, what to build next — then writes plans any agent can execute. It can hand the work to a cheaper model and review the result. It never edits your code.

1 skill

shadcn/improve 11,576

Maintain guardrails?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins16 plugins