All Claude Code modsoleksandrkodua/qa-mods
sandbox-guard
Denies Edit/Write/Bash writes to Claude config paths the sandbox cannot write (settings, skills, plugins, hooks, projects, ...) and tells Claude to hand the user a ready Terminal command instead of trying workarounds.
sandbox-guard reaches L1 (reads) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 2
- API methods referenced: 1
- Access from classified calls: L1, reads: reads env vars
- Static scan, not a runtime test
Install hint
/plugin install sandbox-guard --marketplace oleksandrkodua/qa-modsFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L1 Readsreads env varsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Edit|Write calls, Bash calls
- Hooks
session.start, tool.call {tool=Edit|Write}, tool.call {tool=Bash}- API calls
$.env.get- Validation on 2.1.302
- Passed
- Scanned revision
9c145eaaa881- Marketplace passed
- qa-mods
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from oleksandrkodua/qa-mods
- blast-radiusBefore a risky Bash command runs, says what it will touch. A plain deletion is judged by git: files outside g…
- evidence-saverSaves every image (screenshot) returned by a tool to a folder the user picks: the first screenshot asks for t…
- handoffThe mini Clippy beside the band above the prompt: calm / worried / panic by context fill, with random Ukraini…
- hudOne line above the prompt: context fill, rate-limit windows, a cache chip (кеш 59:48, m:ss) while the prompt…
- next-steps-ukFork of next-steps (MIT, Thariq Shihipar): suggested next prompts are always written in Ukrainian. Install IN…
- notifyA quick pop-up (toast, plus a macOS system notification) when a long Bash command or a long turn finishes, so…
- plan-progressLive plan progress bars above the Claude Code prompt: stages, steps, a pixel fill and soft sounds for decisio…
- quick-actionsIn VS Code (no band above the prompt) the typed /compact and /clear ask first (confirm / cancel). The Compact…
- remote-gateAsks before git push and wrangler --remote, showing the folder, the branch, the remote and the commits that w…
- replay-theater/replay opens a pane that steps through the session's file edits (Edit, Write, MultiEdit) one at a time, show…
- retry-analyzerDetects Claude repeating the same failing tool call (3+ identical failures, or 4+ with the same error) and te…
- secret-redactorMasks API keys, tokens, private keys and password assignments in tool results before the model sees them.
- verification-guardChecks Claude's claims (tests pass, verified, fixed, no regression, API returns N) against the tool calls tha…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/oleksandrkodua--qa-mods--sandbox-guard/)
[](https://mods.aidojo.si/mods/oleksandrkodua--qa-mods--sandbox-guard/)