All Claude Code modsPlagemes/claude-mods
guardian
One security policy for every guard mod: permissive, standard or strict: plus a project safety score.
review UI rewrite
guardian reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 5
- API methods referenced: 27
- Access from classified calls: L2, writes or runs: runs processes, writes files, drives Claude, reads files, reads env vars, persists state, draws
- Unclassified calls: 9 (
$.mods.hello,$.mods.installed,$.mods.publish,$.mods.recent,$.mods.registerTab,$.mods.shareand 3 more), full access unknown - Static scan, not a runtime test
Install hint
/plugin install guardian --marketplace Plagemes/claude-modsFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsother: $.mods.hello, other: $.mods.installed, other: $.mods.publish, other: $.mods.recent, other: $.mods.registerTab, other: $.mods.share, other: $.mods.showTab, other: $.state.get, other: $.state.set, runs processes, writes files, drives Claude, reads files, reads env vars, persists state, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- every tool call
- Hooks
session.start, command.run {command=guardian}, tool.call, turn.complete, ui.render {component=Pane, requestId=claude-mods}, ui.render {component=Pane, requestId=guardian}- API calls
$.clock.after, $.clock.now, $.command.register, $.command.run, $.env.get, $.fs.exists, $.fs.read, $.fs.write, $.mods.hello, $.mods.installed, $.mods.publish, $.mods.recent, $.mods.registerTab, $.mods.share, $.mods.showTab, $.process.run, $.session.cwd, $.session.repo, $.state.get, $.state.set, $.store.get, $.store.set, $.ui.invalidate, $.ui.log, $.ui.open, $.ui.resolve, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
e9815cead031- Marketplace passed
- claude-mods
- UI rewrite review
- UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. mods/guardian/hooks/shared/shell.ts:106, mods/guardian/hooks/shared/shell.ts:250
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from Plagemes/claude-mods
- a11y-guardFlags accessibility misses as Claude writes UI: images without alt, unlabeled buttons, clickable divs.
- achievementsUnlock achievements as you work: first commit, 100 green test runs, a week-long streak and more.
- activity-heatmapA heat map of when you use Claude Code, by hour and weekday.
- agent-presetsReady-made subagents for focused jobs: debugger, test writer, doc writer and migrator.
- audit-trailWrites every action Claude takes to an append-only JSONL audit log.
- auto-checkpointSnapshots your work tree before every editing turn and lets you /rollback to any checkpoint.
- auto-formatFormats every file Claude edits with the right formatter for its language.
- autopilotGive it a goal and success criteria; it plans, delegates, verifies and retries until the criteria pass or it…
- backup-before-migrateDumps your local database before every migration so a bad one is one command away from undo.
- bash-history/bash-history lists recent shell commands Claude ran, with exit status and duration.
- benchmark-compare/bench runs your benchmarks before and after a change and compares the numbers.
- big-read-guardStops full reads of huge files and nudges toward offset/limit or grep.
- bookmark/bookmark saves the last answer; /bookmarks lists and reuses them.
- branch-namer/git-branch creates a well-named git branch from a short task description.
- break-reminderReminds you to stand up and stretch every 50 minutes of active work.
- bundle-size-watchCompares bundle size after each build and warns when it grows.
- cache-hit-meterShows what share of input tokens came from the prompt cache.
- calendar-syncReads your calendar (private iCal link) so notifications and questions respect meetings and time off, and sug…
- celebrateCelebrates when failing tests go green again.
- changelog-keeperKeeps CHANGELOG.md's Unreleased section up to date as you commit.
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/Plagemes--claude-mods--guardian/)
[](https://mods.aidojo.si/mods/Plagemes--claude-mods--guardian/)