537 security Claude Code mods, most popular first. Every listing shows its security level and install command.
| Name | Popularity | Security |
|---|---|---|
| dotnet-pilot .NET development plugin for Claude Code — Roslyn semantic analysis, DI/architecture/EF Core guards, convention | 5 ★ | Low risk |
| cairn Milestone-driven development workflow and tracking system for Claude Code projects: a language-agnostic core w | 4 ★ | Review before installing |
| ultrapowers The client for ultrapowers: /ultrapowers commits an approved plan and runs on an exe.dev fleet you provision — | 4 ★ | Low risk |
| scope-guard Notices when Claude drifts outside your request. Clear drift waits for your answer in a question dialog; milde | 4 ★ | Low risk |
| dotclaude A workspace pane for Claude Code: vitals rail, edit gate (blocks Edit, Write, NotebookEdit and MultiEdit until | 3 ★ | Review before installing |
| limit-bars Bars for the 5-hour and weekly usage limits above the prompt, a ring showing how long the prompt cache stays w | 3 ★ | Review before installing |
| sidekick Checks your message before it is sent, by rules and, where worthwhile, briefly with Haiku 5.5 (Sonnet 5.5 writ | 3 ★ | Low risk |
| quality-router Quality-first routing: picks main-loop effort (medium to max) per request, assigns model and effort to subagen | 3 ★ | Review before installing |
| guard-widget A tally of this session's permission checks: what was allowed, what you were asked about and what was denied. | 3 ★ | Low risk |
| redact-widget Replaces API keys, tokens, private keys and passwords in command output and file reads before Claude sees them | 3 ★ | Low risk |
| agent-usage-guard A Claude Code mod that holds subagent fan-out, heavy-context prompts and retry loops before they spend your us | 3 ★ | Review before installing |
| mem-guard Bash memory rules: Node commands run in claude-cmd.slice, and runs that would starve the machine are refused | 3 ★ | Review before installing |
| redact Secrets found by betterleaks reach the model as ‹secret:…› tokens; Write/Edit restore them, other tools refuse | 3 ★ | Review before installing |
| branch-guard Before Claude commits or pushes on the default branch, asks you whether to create a branch first. | 3 ★ | Low risk |
| env-guard Asks you before Claude reads a .env or key file, and refuses when no one is there to answer. | 3 ★ | Low risk |
| open-file-guard Before Claude uses a Word, Excel or PowerPoint file you have open, asks you to close it instead of letting the | 3 ★ | Low risk |
| bash-guard A seatbelt for YOLO mode: blocks catastrophic shell commands (rm -rf ~, mkfs, dd to a disk, fork bombs) and as | 3 ★ | Low risk |
| file-guard Keeps Claude's file edits inside the project: refuses writes outside it (symlinks resolved), never lets a tool | 3 ★ | Low risk |
| injection-guard Defuses prompt injection in tool output: strips invisible Unicode that hides text from you but not from the mo | 3 ★ | Low risk |
| net-guard Stops data exfiltration and surprise network calls: checks every curl, wget, ssh, scp, git push and WebFetch a | 3 ★ | Low risk |
| secret-shield Keeps secrets out of Claude's context: API keys, tokens, private keys and passwords in tool output are replace | 3 ★ | Low risk |
| slopsquat-guard Stops Claude from installing hallucinated or typosquatted packages: every npm, pip, uv, poetry, cargo and gem | 3 ★ | Low risk |
| catalyst-swe-request Request-text policy for devin/swe-2: registers one rule in the host's $.requestText noun. | 3 ★ | Low risk |
| signet-eval-functions Optional Claude Code 2.1.274 and 2.1.280 function hooks for Signet-eval policy and output redaction | 3 ★ | Review before installing |
| scope-guard Counts the distinct files a turn edits and stops at a threshold to make the goal get restated, so a small ask | 3 ★ | Review before installing |
| vault Credential vault for Claude Code: macOS Keychain secrets, per-directory grants, injected env, redacted output, | 3 ★ | High risk |
| mod 5dive telemetry producer, seat panel, command surface and tool-call policy guard for Claude Code function hook | 2 ★ | Review before installing |
| cache-guard Warns once before a message that will cost far more than usual: a large Claude Code context whose prompt cache | 2 ★ | Review before installing |
| jev-guard Jev gates Bash, Write and Edit, and screens Read and Bash results for injected instructions; a blocked command | 2 ★ | Review before installing |
| mis-notas Guarda notas con /nota y Claude las usa como tu contexto y tus preferencias en todas las sesiones | 2 ★ | Low risk |
| gtm-operator The GTM operator mod for Claude Code: scores every go-to-market draft with its own skill pack's scorer, flags | 2 ★ | Review before installing |
| garde-prod Production guard: flags every command that touches production or is risky (force push, secrets, rm -rf…), chec | 2 ★ | Low risk |
| secret-mask Mask token-like strings in tool output before they reach the conversation | 2 ★ | Low risk |
| dep-sentinel Audits the project's dependencies once a day in the background (npm, pnpm, yarn, pip-audit, cargo audit) and f | 2 ★ | Review before installing |
| night-shift Works your backlog while you are away: when idle, one worker at a time implements the next .claude/backlog.md | 2 ★ | High risk |
| jev-precommit A commit gate that reads the staged diff in a blink: Jev flags debug output, commented-out code, TODOs, machin | 2 ★ | Review before installing |
| jev-seclint An instant security reviewer on every code edit: ~20 yes/no checks per edit answered by Jev in a few hundred m | 2 ★ | Review before installing |
| jev-test-guard Catches tests being weakened to make them pass: every test-file edit is judged by Jev in a few hundred ms agai | 2 ★ | Review before installing |
| bash-guard Blocks catastrophic shell commands (rm -rf ~, curl | sh, force-push to main, DROP DATABASE, format C:) and ask | 2 ★ | Review before installing |
| branch-guard Keeps work off protected branches: no commit, merge, rebase, cherry-pick, am or push on main/master/release/* | 2 ★ | Review before installing |
| clobber-guard Stops accidental truncation of real code: no "// ... rest of the code" placeholders over real code, and a ques | 2 ★ | Low risk |
| path-guard Protected files and a project boundary: Claude can't edit .env, keys or .git, asks before touching lockfiles a | 2 ★ | Low risk |
| secret-shield Keeps credentials out of your code, your shell commands and Claude's context: blocks hard-coded secrets in edi | 2 ★ | Review before installing |
| cache-guard Asks before /model, /output-style, /fast, /effort, MCP or plugin changes and /config rows that would throw awa | 2 ★ | Low risk |
| concurrency-guard Caps parallel subagents and monitors; more need a stated reason and the user's approval | 2 ★ | Low risk |
| machine-guard Puts every command that changes the machine in front of the user before it runs | 2 ★ | Low risk |
| flashcards [Experimental] Flashcards from your repo's specs, ADRs and vault task cards — /cards build generates a review | 2 ★ | Low risk |
| obw Obsidian Workspace — project-scoped vault productivity (capture / notes / PM). Skills own folder layout and te | 2 ★ | Review before installing |
| superpowers-tracker Live tracker for obra/superpowers: a stage rail above the prompt, a dashboard pane, resume detection, toasts a | 2 ★ | High risk |
| cost-visibility Live cost, context, and plan-quota meters above the Claude Code prompt (Nerd Font required for icons). Type /s | 2 ★ | Review before installing |
| exo An exoskeleton for Claude Code: guards against costly mistakes, a cockpit while working, a recap at the end an | 2 ★ | High risk |
| rate-limit-guard At 90% of the 5-hour limit, tells the orchestrator and every subagent to checkpoint and stop at a safe point, | 2 ★ | Low risk |
| blast-radius-ko Anthropic의 blast-radius 샘플을 한글화하고 위험 명령 목록을 넓힌 k-mods 수정판. rm -rf, git reset --hard, force push, prisma/psql/d | 2 ★ | Low risk |
| tamirs-superpowers 30 bundled skills, 10 specialist agents, smart worktree hooks, statusline, and MCP server stubs — plan, implem | 2 ★ | Review before installing |
| tamirs-superpowers-guard In-process guard for tamirs-superpowers: holds a destructive shell command (force push, rm -rf, git reset --ha | 2 ★ | Low risk |
| jarvis J.A.R.V.I.S. HUD: arc-reactor spinner, live telemetry band (context, tok/s, agents by model), subagent uplink | 2 ★ | Review before installing |
| oh-my-claudeagent Claude Code, with receipts. Plans with you, hands each task to a specialist agent, and keeps a session from ca | 2 ★ | Review before installing |
| secret-guard Hides secrets in tool results before Claude reads them: the secret values of every .env and .env.* from your s | 2 ★ | Low risk |
| p3c-guard Agent 写 Java 时，新增的阿里 Java 规约（p3c）违规落不了盘。Blocks Java writes that add Alibaba p3c violations. | 1 ★ | Review before installing |
| code-modernization Guided modernization for any legacy codebase: start with /modernize, get an assessment, an interactive map, th | 1 ★ | Review before installing |
| audit-pack Three read-only audit commands in one mod: /secret-scan, /conflicts and /licenses. They read git, project file | 1 ★ | Low risk |
| beads-guard Asks before bd commands that delete data or rewrite history: delete, purge, prune, gc, sql, admin, import, ren | 1 ★ | Low risk |
| big-file-guard Asks before a Write creates content over 1 MB, or git add names a file over 5 MB. Measures the files with find | 1 ★ | Low risk |
| chmod-guard Asks before chmod makes files world-writable (777, a+w, o+w) or chmod or chown runs recursively on a broad pat | 1 ★ | Low risk |
| ci-config-guard Asks before Write or Edit changes CI config: .github/workflows, .gitlab-ci.yml or .circleci/config.yml. | 1 ★ | Low risk |
| clippy One helpful toast per session per trigger, in the classic paperclip voice: when you edit a migrations folder, | 1 ★ | Low risk |
| cron-guard Asks before scheduled jobs or services are wiped or stopped: crontab -r, crontab replaced from stdin or a file | 1 ★ | Low risk |
| curl-pipe-guard Asks before a download is piped into a shell or interpreter (curl | sh, wget -O- | bash, bash <(curl ...)). | 1 ★ | Low risk |
| db-reset-guard Asks before a framework wipes a database: prisma migrate reset, rails or rake db:drop and db:reset, alembic do | 1 ★ | Low risk |
| deploy-guard Asks before a production deploy: vercel --prod, netlify deploy --prod, firebase deploy, fly deploy, gcloud app | 1 ★ | Low risk |
| docker-guard Asks before Docker commands that delete data: system, volume or image prune, rm -f, volume rm and compose down | 1 ★ | Low risk |
| env-exfil-guard Asks before a command prints your environment, echoes a secret variable or sends local data to a remote host. | 1 ★ | Low risk |
| error-meter A band above the prompt with how many tool calls failed this session (an error or a deny) and which tool faile | 1 ★ | Low risk |
| git-history-guard Asks before git commands that throw away work or rewrite history: reset --hard, clean, rebase, filter-branch, | 1 ★ | Low risk |
| gitignore-check Asks before git add or commit when secret-looking files are not ignored or are already tracked. Checks with gi | 1 ★ | Low risk |
| guard-devops Asks before harsh DevOps commands: destructive Docker, Kubernetes and Helm calls, CI config edits, broad chmod | 1 ★ | Low risk |
| guard-essentials Asks only before harsh or disaster commands: destructive infra, git and SQL, piping downloads into a shell, su | 1 ★ | Review before installing |
| guard-pack The 15 core Baselane guards in one mod (secrets, git, infra, packages, path jail). Some read git, measure file | 1 ★ | Review before installing |
| infra-guard Asks before terraform destroy, kubectl delete, force-push, DROP TABLE or rm -rf. | 1 ★ | Low risk |
| k8s-guard Asks before kubectl apply or replace with --force, kubectl drain, helm uninstall, and kubectl delete behind gl | 1 ★ | Low risk |
| lockfile-guard Asks before a lockfile is written or edited by hand; the package manager should change it. | 1 ★ | Low risk |
| migration-guard Asks before Write or Edit changes a migration that already exists; new migration files pass. | 1 ★ | Low risk |
| no-verify-guard Asks before git hooks are skipped (--no-verify, commit -n, HUSKY=0, core.hooksPath=/dev/null). | 1 ★ | Low risk |
| package-guard Asks before a new dependency is installed (npm, pnpm, yarn, bun, pip, uv, poetry, cargo, go, gem) and names th | 1 ★ | Low risk |
| prod-db-guard Asks before destructive SQL runs in a command: TRUNCATE, DELETE or UPDATE with no WHERE. | 1 ★ | Low risk |
| publish-guard Asks before a package is published: npm, pnpm, yarn or bun publish, cargo publish, twine upload, gem push, poe | 1 ★ | Low risk |
| registry-push-guard Asks before an image or chart is pushed to a registry: docker push, docker buildx --push, podman push, helm pu | 1 ★ | Low risk |
| release-pack Asks before a release leaves your machine: package publish, tag push, production deploy and registry push guar | 1 ★ | Low risk |
| secret-commit-guard Asks before a git commit that would record a credential or a secret-named file. Reads the staged diff with git | 1 ★ | Low risk |
| secret-filename-guard Asks before a Bash command touches a secret-looking file (.env, private keys, credentials). | 1 ★ | Low risk |
| secret-guard Asks before a live API key, token or private key is written, edited or run. | 1 ★ | Low risk |
| secret-output-guard Tells Claude not to repeat a credential that showed up in command or file output, and names the source to rota | 1 ★ | Low risk |
| secret-scan Adds /secret-scan: tracked files and line numbers that hold secret-shaped text, found with git grep. Never pri | 1 ★ | Low risk |
| security-mode Checks each change for injection, secrets, authorization and unsafe input, and states the risks it checked. | 1 ★ | Low risk |
| ship-safe-pack The release-pack guards plus db-reset-guard and upload-guard: asks before publish, tag push, production deploy | 1 ★ | Low risk |
| ssh-guard Asks before a private key in .ssh is read, authorized_keys or the SSH config is changed, or ssh-keygen would o | 1 ★ | Low risk |
| sudo-guard Asks before sudo, doas or su -c runs a command with elevated rights. | 1 ★ | Low risk |
| tag-guard Asks before release tags go to a remote: git push --tags, --follow-tags or --mirror, a push of a tag ref, and | 1 ★ | Low risk |
| team-pack Team habits in one install: Conventional Commits, test-first work and a security check on every change. | 1 ★ | Low risk |
| upload-guard Asks before local files go to a remote host: scp or rsync to host:path, piped input to nc, curl -T, sftp put. | 1 ★ | Low risk |