Home / Claude Code mods / Security / goalpost-guard

goalpost-guard

goalpost-guard is a Claude Code mod by Xabilimon1 that stops Claude from passing a check by lowering the bar: weakened or deleted tests, new suppressions, relaxed config, softened CI, lowered coverage, skipped git hooks.

Updated 2026-10-18

What is goalpost-guard?

goalpost-guard is a Claude Code mod by Xabilimon1 that stops Claude from passing a check by lowering the bar: weakened or deleted tests, new suppressions, relaxed config, softened CI, lowered coverage, skipped git hooks. It is listed under Security and has 1 GitHub stars.

TypeClaude code mod
AuthorXabilimon1
RepositoryXabilimon1/emcc-claude-code-mods
Popularity1 GitHub stars
CategorySecurity
SecurityLow risk (88/100)
Rank#2,395 of 5,272 Claude Code mods; #284 in Security
LicenseMIT
Last commit2026-10-18
Hooks4 events
SeesBash calls, Edit calls, Write calls
Draws onAbovePrompt, Pane

Is goalpost-guard safe to install?

goalpost-guard scores 88/100 on the MCPMods security check: Low risk. Things to review: starts processes outside the sandbox. It passed 7 of 8 checks.

Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.

CheckResult
No network accessPass
Starts processes outside the sandboxReview
Writes no files or configPass
Doesn't read environment variablesPass
Only sees the events it hooksPass
Doesn't drive ClaudePass
Passes claude plugin validatePass
Has an open-source licensePass

API calls in its code

CallWhat it means
$.clock.now
$.command.register
$.emcc.badge
$.emcc.flag
$.emcc.profile
$.fs.existsreads files
$.fs.readreads files
$.process.runruns processes
$.session.cwd
$.session.surfaces
$.state.get
$.state.set
$.store.getkeeps its own state
$.store.setkeeps its own state
$.ui.askdraws interface
$.ui.opendraws interface
$.ui.resolvedraws interface

How do I install goalpost-guard?

  1. Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
    claude --version
  2. Read its footprint. This lists every event it hooks and every API call it makes, without running it.
    git clone https://github.com/Xabilimon1/emcc-claude-code-mods
    claude plugin validate ./emcc-claude-code-mods/mods/goalpost-guard
  3. Install it. Run this in your terminal, then /reload-plugins in an open session.
    claude plugin marketplace add Xabilimon1/emcc-claude-code-mods && claude plugin install goalpost-guard@emcc

Or ask Claude to set it up

Paste this into Claude Code and it installs goalpost-guard for you:

Install the "goalpost-guard" Claude Code mod from https://github.com/Xabilimon1/emcc-claude-code-mods/tree/main/mods/goalpost-guard. Run claude plugin validate on it first and show me what it can access before you enable it.

More from Xabilimon1/emcc-claude-code-mods

This repository has 5 Claude Code mods on MCPMods.

  • emcc-core: EMCC's shared base: the $.emcc noun (evidence of tests, builds, lints and edits; badges; profile; kill switch) and one s (Low risk)
  • headspace: What Claude carries, in colour: a bar above the prompt with system, rules, conversation and large tool results, and a pa (Review before installing)
  • headspace-cut: headspace's companion: answers the compactions headspace starts, replacing the marked tool results with one line each an (Low risk)
  • witness: A live view of Claude's work: the goal, a ribbon of what it spent its time on, what it is doing now, and each step marke (Low risk)