What is dev-guard?
dev-guard is a Claude Code mod by sonata39-star that blocks catastrophic commands, asks before risky ones, and stops secrets from being written into files. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | sonata39-star |
| Repository | sonata39-star/claude-mod |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Review before installing (72/100) |
| Rank | #4,667 of 5,272 Claude Code mods; #489 in Security |
| Last commit | 2026-10-02 |
| Hooks | 1 events |
| Sees | every tool call |
| Draws on | nothing |
Is dev-guard safe to install?
dev-guard scores 72/100 on the MCPMods security check: Review before installing. Things to review: starts processes outside the sandbox; reads environment variables. It passed 5 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts processes outside the sandbox | Review |
| Writes no files or config | Pass |
| Reads environment variables | Review |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| No license detected | Note |
API calls in its code
| Call | What it means |
|---|---|
$.env.get | reads env vars |
$.process.run | runs processes |
$.session.cwd | |
$.session.root | |
$.ui.ask | draws interface |
$.ui.log | draws interface |
$.ui.toast | draws interface |
How do I install dev-guard?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/sonata39-star/claude-mod claude plugin validate ./claude-mod/dev-guard
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add sonata39-star/claude-mod && claude plugin install dev-guard@claude-mod
Or ask Claude to set it up
Paste this into Claude Code and it installs dev-guard for you:
Install the "dev-guard" Claude Code mod from https://github.com/sonata39-star/claude-mod/tree/main/dev-guard. Run claude plugin validate on it first and show me what it can access before you enable it.
More from sonata39-star/claude-mod
This repository has 8 Claude Code mods on MCPMods.
- auto-check: Runs the project's linter after each edit and its type-checker before Claude stops, handing failures back to Claude (Low risk)
- dev-dashboard: A right-hand sidebar of this session: files edited, recent commands, checks and denials, as a menu of tabs (Low risk)
- dev-status: Status line: git branch, context window, rate limits with reset times, session cost and RTK savings (Low risk)
- done-notify: Sound, toast and macOS notification when a long turn finishes or Claude is waiting for you (Low risk)
- neko: สัตว์ผู้ช่วย (Neko): แมว หมา นกฮูก วาฬ ฯลฯ นั่งเหนือช่องพิมพ์ คอยให้คำแนะนำระหว่างทำงาน และตอบคำถามผ่าน /neko (Low risk)
- standup: /standup: a Thai daily standup from today's git commits and this session's work (Low risk)
- team-flow: Band above the prompt showing the BA → Lead → Dev → Review → Sec pipeline from .team/ files (Low risk)