All Claude Code modsvincentlauriat/ModsTools
sparkle-guard
Protects the Sparkle EdDSA signing key: denies deleting it from the keychain, asks before generate_keys may create or import a key and before an edit changes an existing SUPublicEDKey
sparkle-guard reaches L1 (reads) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 3
- API methods referenced: 3
- Access from classified calls: L1, reads: reads files
- Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L1 Reads filesreads filesValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Only what it hooks
- Hooks
session.start, command.run {command=sparkle-guard}, tool.check- API calls
$.command.register, $.fs.read, $.session.cwd- Validation on 2.1.302
- Passed
- Scanned revision
8c2da67a7b98
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from vincentlauriat/ModsTools
- achievementPlayful badges unlocked once ever from real events (tool calls, turns, subagents, tests, git); /achievements…
- agent-trackerA pane listing the subagents launched this session with their status and duration
- ascii-weatherWeather from wttr.in in the status line (refreshed at most once an hour); /weather shows the one-line forecast
- auto-contextAdds git branch, dirty count, last commit and next TODOS to the session's system prompt
- branch-guardAsks the user before Edit/Write/NotebookEdit changes a file of a git repo whose current branch is main or mas…
- build-gateBand above the prompt when a turn changed source code without running a matching build or type-check
- changed-filesA pane listing the files Claude modified during the session
- ci-watchFollows the GitHub Actions runs of a commit after git push: status line while they run, toast with the failed…
- command-historyA pane listing the Bash commands run this session with exit status and duration
- commit-lintRefuses git commit commands whose message subject is not a Conventional Commit (type(scope)!: subject, header…
- commit-size-guardAsks before a git commit or git add includes large files, big binaries or build/release artifacts (dmg, zip,…
- compact-advisorToasts once when the context crosses a threshold; /compact-advisor prints a ready-to-paste /compact line with…
- context-gaugeA band above the prompt that appears when the context window is at least 70% full
- cost-meterSession cost and rate-limit usage in the status line; toasts when the cost crosses a threshold; /cost-meter s…
- deriveddata-janitorFinds Xcode DerivedData folders whose workspace is gone (removed worktrees), shows them in a status line and…
- diff-previewA pane showing git diff --stat and the untracked file count, refreshed after each turn
- doc-sync-guardWarns above the prompt when a turn did not update COMMANDS.md, or changed code without updating CHANGES.md
- done-soundPlays a short chime when a long main-agent turn completes; /done-sound off|on|test
- edit-undoSnapshots each file before Claude's Edit/Write/NotebookEdit and lets you undo the last change per file from a…
- env-protectAsks the user before Claude reads secret files (.env, private keys, .netrc, .npmrc, .aws/credentials, keychai…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/vincentlauriat--ModsTools--sparkle-guard/)
[](https://mods.aidojo.si/mods/vincentlauriat--ModsTools--sparkle-guard/)