All Claude Code modsdvakatsiienko/frame
x-mod-guard
reads every Bash call, fork spawn and Write before it runs: a Write over a tracked file the session never read, a floor command, a system, overwrite, prune or remote-delete command, a known hazard shape, a coder spawn whose brief has no x brief check stamp, or a fork with no why-fork line is refused with its safe door, never a dialog; each refusal and escape is kept in its own store as an event and a per-day count, which x-mod-stash's band reads as its 🛡️ counter row
x-mod-guard reaches L2 (writes or runs) by its classified calls and passed claude plugin validate with warnings on Claude Code 2.1.302.
- Events hooked: 3
- API methods referenced: 17
- Access from classified calls: L2, writes or runs: runs processes, reads files, reads env vars, persists state, draws
- Unclassified calls: 2 (
$.state.get,$.state.set), full access unknown - Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsother: $.state.get, other: $.state.set, runs processes, reads files, reads env vars, persists state, drawsValidation
Passed with warnings on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- /"^(Bash|Monitor)$"/ calls, /"^(Edit|Write|MultiEdit)$"/ calls, /"^(Edit|MultiEdit|Write)$"/ calls, /"^(Read|Edit|MultiEdit|Write)$"/ calls, SendMessage calls, every prompt, subagent spawns
- Hooks
tool.call {tool=/"^(Bash|Monitor)$"/}, tool.call {tool=/"^(Edit|Write|MultiEdit)$"/}, tool.call {tool=/"^(Edit|MultiEdit|Write)$"/}, tool.call {tool=/"^(Read|Edit|MultiEdit|Write)$"/}, tool.call {tool=SendMessage}, prompt.submit, agent.spawn- API calls
$.clock.now, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.stat, $.process.run, $.session.cwd, $.session.id, $.session.root, $.state.get, $.state.set, $.store.delete, $.store.get, $.store.keys, $.store.set, $.ui.log- Validation on 2.1.302
- Passed with warnings
- Scanned revision
0c3b395e0472
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from dvakatsiienko/frame
- x-mod-holdsno two sessions write the same file: a session's first edit of a file holds it until it is committed, the ses…
- x-mod-redactkeeps secrets out of every transcript: api keys, tokens and private keys read as a stable placeholder in ever…
- x-mod-stashdima's command center above the prompt, one row: orbit 🪐 (the session's asks, ticked in the board instead of…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/dvakatsiienko--frame--x-mod-guard/)
[](https://mods.aidojo.si/mods/dvakatsiienko--frame--x-mod-guard/)