All Claude Code modsdavidho27941/cockpit
gcloud-guard
Holds gcloud and gsutil commands that would create, change or delete cloud resources, shows the account, project, location and the current state of the targets, and asks you to Proceed or Cancel.
gcloud-guard reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 4
- API methods referenced: 14
- Access from classified calls: L2, writes or runs: runs processes, reads files, reads env vars, draws
- Unclassified calls: 2 (
$.state.get,$.state.set), full access unknown - Static scan, not a runtime test
Install hint
/plugin install gcloud-guard --marketplace davidho27941/cockpitFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsother: $.state.get, other: $.state.set, runs processes, reads files, reads env vars, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Bash calls
- Hooks
session.start, command.run {command=gcloud-guard}, tool.call {tool=Bash}, ui.render {component=Pane, requestId=gcloud-guard}, ui.render {component=AbovePrompt}- API calls
$.clock.every, $.clock.now, $.command.register, $.env.get, $.fs.read, $.fs.stat, $.process.run, $.state.get, $.state.set, $.ui.close, $.ui.invalidate, $.ui.open, $.ui.resolve, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
0a484d9414d4- Marketplace passed
- cockpit
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from davidho27941/cockpit
- auto-handoverWhen context usage reaches your threshold, writes a handover note over the cached conversation prefix, compac…
- blast-radiusHolds risky shell commands (rm -rf, git reset --hard, git clean, force push, migrations) and shows what they…
- cache-keeperKeeps the prompt cache warm while a session idles: every 50 minutes (configurable) one tiny request over the…
- opsx-boardOpenSpec board: which phase you are in (propose/apply/archive), which tasks.md task is current, and every sub…
- secret-guardKeeps API keys, cloud credentials and other secrets out of what is sent to the model: every text that enters…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/davidho27941--cockpit--gcloud-guard/)
[](https://mods.aidojo.si/mods/davidho27941--cockpit--gcloud-guard/)