Home / Claude Code mods / Security / bash-guard

bash-guard

bash-guard is a Claude Code mod by Singh-AP that a seatbelt for YOLO mode: blocks catastrophic shell commands (rm -rf ~, mkfs, dd to a disk, fork bombs) and asks before risky ones (force-push, reset --hard, DROP TABLE, curl | sh), even.

Updated 2026-10-17

What is bash-guard?

bash-guard is a Claude Code mod by Singh-AP that a seatbelt for YOLO mode: blocks catastrophic shell commands (rm -rf ~, mkfs, dd to a disk, fork bombs) and asks before risky ones (force-push, reset --hard, DROP TABLE, curl | sh), even. It is listed under Security and has 3 GitHub stars.

TypeClaude code mod
AuthorSingh-AP
RepositorySingh-AP/awesome-claude-mods
Popularity3 GitHub stars
CategorySecurity
SecurityLow risk (100/100)
Rank#1,016 of 5,272 Claude Code mods; #117 in Security
LicenseMIT
Last commit2026-10-17
Stars this week+1
Hooks3 events
SeesBash calls
Draws onnothing

Is bash-guard safe to install?

bash-guard scores 100/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 8 of 8 checks.

Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.

CheckResult
No network accessPass
Starts no processesPass
Writes no files or configPass
Doesn't read environment variablesPass
Only sees the events it hooksPass
Doesn't drive ClaudePass
Passes claude plugin validatePass
Has an open-source licensePass

API calls in its code

CallWhat it means
$.command.register
$.store.getkeeps its own state
$.store.setkeeps its own state
$.ui.askdraws interface
$.ui.toastdraws interface

How do I install bash-guard?

  1. Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
    claude --version
  2. Read its footprint. This lists every event it hooks and every API call it makes, without running it.
    git clone https://github.com/Singh-AP/awesome-claude-mods
    claude plugin validate ./awesome-claude-mods/mods/safety/bash-guard
  3. Install it. Run this in your terminal, then /reload-plugins in an open session.
    claude plugin marketplace add Singh-AP/awesome-claude-mods && claude plugin install bash-guard@awesome-claude-mods

Or ask Claude to set it up

Paste this into Claude Code and it installs bash-guard for you:

Install the "bash-guard" Claude Code mod from https://github.com/Singh-AP/awesome-claude-mods/tree/main/mods/safety/bash-guard. Run claude plugin validate on it first and show me what it can access before you enable it.

More from Singh-AP/awesome-claude-mods

This repository has at least 9 Claude Code mods on MCPMods.

  • files-touched: Every file Claude changed this session, at a glance: a one-line band above the prompt, /touched for a +/- table, and a p (Low risk)
  • git-pulse: Git status at a glance: branch, ahead/behind and changes on the status line, kept fresh as Claude edits, with a heads-up (Low risk)
  • test-pulse: Your test suite's heartbeat: every test run Claude makes shows up in the status line (🧪 ✅ 44/44 passing · 2m ago), with (Low risk)
  • tool-radar: Mission control for what Claude is doing: a live pane of every tool call with status, arguments, duration and failures, (Low risk)
  • codebuild: Build any repo on AWS CodeBuild from Claude Code: pick an AWS profile, press Build. Sets itself up, generates the builds (Review before installing)
  • cost-meter: Always know what a session costs: live $ / context / rate-limit status line, the cost of every turn, context warnings, a (Low risk)
  • buddy: A tiny ASCII pet that lives above your prompt, reacts to everything Claude does, and levels up as you ship. (Low risk)
  • spinner-packs: Themed spinner words: Claude is 'Plundering…' then 'Plundered for 1m 3s'. Ten packs (pirate, Shakespeare, corporate, wiz (Low risk)