All Claude Code modsipartington/claude-mods
command-guard
Refuses shell commands a project's .claude/command-guards.json rules out, for the main loop and every subagent
command-guard reaches L1 (reads) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 1
- API methods referenced: 3
- Access from classified calls: L1, reads: reads files, draws
- Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L1 Reads filesreads files, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Bash calls, Monitor calls
- Hooks
tool.call {tool=Bash}, tool.call {tool=Monitor}- API calls
$.fs.read, $.session.root, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
67a4411dcfc8
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from ipartington/claude-mods
- bg-task-bandA band above the prompt showing running background tasks, their elapsed time and last output line
- handoff-on-clearSaves a handoff when you /clear or exit, and offers it back on your next prompt
- merge-followthroughWatches your PRs, and when one merges it pulls main and deletes the branch, then tells Claude
- review-ledgerKeeps review findings (H1, M3, L2...) per repo across sessions and ticks them off when their PR merges
- tts-liteSpeaks a one-line summary of each reply without starting a headless claude session
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/ipartington--claude-mods--command-guard/)
[](https://mods.aidojo.si/mods/ipartington--claude-mods--command-guard/)