quarantine

Wraps web, MCP and third-party tool output as untrusted data and defangs prompt-injection lines before the model reads them

quarantine reaches L1 (reads) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.

Events hooked: 4
API methods referenced: 7
Access from classified calls: L1, reads: reads env vars, draws
Unclassified calls: 2 ($.state.get, $.state.set), full access unknown
Static scan, not a runtime test

To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.

Access

L1 Reads filesother: $.state.get, other: $.state.set, reads env vars, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: every tool call
Hooks: session.start, command.run {command=quarantine}, tool.call, session.append {door=tool-result}
API calls: $.command.register, $.env.get, $.session.cwd, $.state.get, $.state.set, $.ui.status, $.ui.toast
Validation on 2.1.302: Passed
Scanned revision: 5079c71ad70a

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/ccdwyer--quarantine--quarantine-reach.svg)](https://mods.aidojo.si/mods/ccdwyer--quarantine--quarantine/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/ccdwyer--quarantine--quarantine-validates.svg)](https://mods.aidojo.si/mods/ccdwyer--quarantine--quarantine/)