All Claude Code modsescapeboy/claude-code-kit
ssh-guard
Refuses ssh/scp/rsync to hosts listed in memory decommissioned_hosts.md; "# decommissioned-ok" overrides.
ssh-guard reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 2
- API methods referenced: 4
- Access from classified calls: L2, writes or runs: runs processes, reads files, reads env vars
- Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsruns processes, reads files, reads env varsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Bash calls
- Hooks
session.start, tool.call {tool=Bash}- API calls
$.env.get, $.fs.exists, $.fs.read, $.process.run- Validation on 2.1.302
- Passed
- Scanned revision
09e25f6e2b9d- Marketplace passed
- ai-prompts-mods
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from escapeboy/claude-code-kit
- aside/aside <question>: asks a tool-less fork of the session in a pane; nothing enters the main conversation.
- cache-guardKeeps the prompt cache warm while idle and holds the first prompt after the cache went cold, with its cost.
- ci-watch/ci-watch <pr>: polls gh pr checks every minute in the status line, no tokens.
- cleanup-trackerRecords downloads, installs and started containers; /cleanup-list shows them.
- company-hqBack office for the /company skill: every /company run is its own company (state file per company, several op…
- context-meterBand above the prompt: context fill, cache read, cost, plan limits; warns at 50%/70%; Handoff button and /han…
- deploy-verifyAfter a deploy command, runs 5 post-deploy checks from the project's .claude/deploy-verify.json and tells Cla…
- fleet-statusFleet P1/P2 counts from ~/.continuity/FLEET-STATE.md in the status line; /fleet and /ports commands.
- lang-guardFlags Russian words and plain-language slips (em-dash asides, 40+ word sentences, aphorisms) in Bulgarian ans…
- secret-redactorHides tokens, keys and passwords in tool output as ‹secret:N›, restores them in later tool calls, blocks read…
- spend-ledgerPer-project token and cost ledger per machine; /spend; monthly note in Svod, with other machines pulled over…
- subagent-modelsPins subagent models to a model-routing policy (Opus for judgement, Haiku for mechanical work, Sonnet otherwi…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/escapeboy--claude-code-kit--ssh-guard/)
[](https://mods.aidojo.si/mods/escapeboy--claude-code-kit--ssh-guard/)