What is cortex-guard?
cortex-guard is a Claude Code mod by cdeust that two rules no settings hook enforces, refused at the tool call: wiki pages and their generated ADR mirrors are written only through the Cortex wiki tool, and every git worktree lives at. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | cdeust |
| Repository | cdeust/claude-mods |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Review before installing (72/100) |
| Rank | #2,868 of 5,272 Claude Code mods; #331 in Security |
| Last commit | 2026-10-17 |
| Hooks | 2 events |
| Sees | Edit|Write|NotebookEdit|Bash calls |
| Draws on | nothing |
Is cortex-guard safe to install?
cortex-guard scores 72/100 on the MCPMods security check: Review before installing. Things to review: starts processes outside the sandbox; reads environment variables. It passed 5 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts processes outside the sandbox | Review |
| Writes no files or config | Pass |
| Reads environment variables | Review |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| No license detected | Note |
API calls in its code
| Call | What it means |
|---|---|
$.clock.now | |
$.env.get | reads env vars |
$.fs.stat | reads files |
$.process.run | runs processes |
$.session.id | |
$.session.repo | |
$.state.get | |
$.state.set | |
$.ui.toast | draws interface |
How do I install cortex-guard?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/cdeust/claude-mods claude plugin validate ./claude-mods/mods/cortex-guard
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add cdeust/claude-mods && claude plugin install cortex-guard@claude-mods
Or ask Claude to set it up
Paste this into Claude Code and it installs cortex-guard for you:
Install the "cortex-guard" Claude Code mod from https://github.com/cdeust/claude-mods/tree/main/mods/cortex-guard. Run claude plugin validate on it first and show me what it can access before you enable it.
More from cdeust/claude-mods
This repository has 8 Claude Code mods on MCPMods.
- cortex-cockpit: The harness cockpit, a viewer: the phase every agent is in (PHASES panel, and main and the running agents in the band ab (High risk)
- cortex-wiki: /wiki : compile a Cortex wiki page (Markdown with ```tikz blocks) to PDF through pandoc and xelatex, and open it. (Review before installing)
- harness-fleet: The owner's interface to the plugin fleet: /fleet shows each owned plugin's installed and offered version, the repositor (Review before installing)
- mission-control: A graphical pane of the harness at work: every agent of the turn as a swimlane coloured by phase, bar height its effort, (Low risk)
- zetetic-autopilot: Automatic effort and model, and a quota that limits how many agents run, not how well one runs. Every request runs at th (Review before installing)
- zetetic-genius: Grades every request before its turn starts (task class → effort rung, in one low-effort completion) and routes it to th (Review before installing)
- zetetic-insights: The learning loop: every main turn is kept in a ledger across sessions (phase, effort, steps, failed tool calls, agents, (Review before installing)