claudecodex

guardrails

Blocks commits to protected branches, asks before irreversible deletes, flags prompt injection in content the model reads or writes, and can require a governing document be read before a directory is written. Enforced automatically in both Claude Code and Codex.

0 on GitHubby Sarah Maddenv0.6.1MITupdated 3 days agosecurity
/

Plugin guardrails from marketplace infra-plugins in sarahcallmesmadds/infra-plugins. Commands read from the repo's manifest — 3 days ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (2)

  • injection-scan

    Scan a file, pasted text, or web-page text already fetched into the conversation for prompt-injection patterns and report what it finds. It does not fetch URLs itself. Read-only, changes nothing. Use before acting on a document from outside the project, when something a file "asks" you to do feels o

  • undo-possible

    Assess a shell command for irreversible destructive potential before running it, and explain what it would do. Read-only, runs nothing. Use when a command involves rm, git reset, git clean, force push, or branch deletion, or when you are about to run something you did not write. Triggers on "undo-po

Hooks (4)

  • PreToolUse

    [ -n "${CLAUDE_PLUGIN_ROOT}" ] || { printf '%s\n' "Plugin hooks are off because this host did not tell the hook where the plugin is installed. A restart will not help." >&2; exit 3; }; [ -e "${CLAUDE_

  • PreToolUse

    [ -n "${CLAUDE_PLUGIN_ROOT}" ] || { printf '%s\n' "Plugin hooks are off because this host did not tell the hook where the plugin is installed. A restart will not help." >&2; exit 3; }; [ -e "${CLAUDE_

  • PreToolUse

    [ -n "${CLAUDE_PLUGIN_ROOT}" ] || { printf '%s\n' "Plugin hooks are off because this host did not tell the hook where the plugin is installed. A restart will not help." >&2; exit 3; }; [ -e "${CLAUDE_

  • PostToolUse

    [ -n "${CLAUDE_PLUGIN_ROOT}" ] || { printf '%s\n' "Plugin hooks are off because this host did not tell the hook where the plugin is installed. A restart will not help." >&2; exit 3; }; [ -e "${CLAUDE_

View source on GitHub

More from sarahcallmesmadds/infra-plugins

All 6 plugins →

build-loop

claudecodex

Keep everything you build honest. Log what a skill, hook, command, plugin or script got wrong the moment it happens, fix it from the queue with an approval gate, know what else the fix puts at risk, and keep a to-build list that closes itself when the work actually ships.

11 skills · hooks

0

session

claudecodex

Make sessions continuous. Wrap one up into a handoff the next one loads, start with today's date and a compact build-loop brief, warn when another session is already working here, and put cost, context and connected tool health in the status line.

5 skills · hooks

0

git-hygiene

claudecodex

Tells you which branches are proved safe to delete, keeps project worktrees in one configured folder, and cleans up finished worktrees. It removes only the branches and worktrees you approve, re-checks each one first, and keeps anything it cannot prove safe.

4 skills · hooks

0

slop-check

claudecodex

Catch the habits that mean nobody edited it, and rewrite an answer that did not land. Blocks em dashes and choppy sentence runs in the assistant's own writing in both Claude Code and Codex, checks any draft, document, pull request, chart or spec for the signs it shipped unreviewed, reshapes a confusing answer around what you have to do, and makes each slide title state the takeaway of its slide.

3 skills · hooks

0

spend-guardrails

claudecodex

Choose the lowest-cost current Claude or OpenAI model that can reliably do the work, without recommending retired models.

1 skill

0

Similar plugins

CMEM Pro

claude

CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents

3 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

mempalace

claudecodex

AI memory system — mine projects and conversations into a searchable palace. 47 MCP tools, auto-save hooks, guided setup.

3 skills · 6 commands · 1 MCP server · hooks

MemPalace/mempalace 60,536

Perform AI code review on Git diffs — supports workspace changes, branch ranges, and single commits with concurrent per-file analysis, codebase search, and deep context-aware review.

2 commands

alibaba/open-code-review 50,068

pensyve

claude

Universal memory runtime for Claude Code with cross-session memory, entity-aware recall, lifecycle hooks, skills, commands, and memory-curator agents

7 skills · 7 commands · 2 agents · hooks

wshobson/agents 42,461

prowler

claude

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server

prowler-cloud/prowler 15,234

worktrunk

claudecodex

Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows. This plugin provides configuration guidance (LLM commit messages, project hooks, worktree paths), automatic activity tracking (🤖/💬 indicators in `wt list` showing active Claude sessions), and a `/wt-diff` pane showing each worktree's changes.

2 skills · hooks

max-sixty/worktrunk 12,481

Maintain guardrails?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins6 plugins