What is guardrails-approval?
guardrails-approval is a Claude Code mod by scaso01 that a human signs off before anything that can't be undone: publishing, killing protected processes, editing secrets or stale copies. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | scaso01 |
| Repository | scaso01/claude-risk-guardrails |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | High risk (40/100) |
| Rank | #4,537 of 5,272 Claude Code mods; #473 in Security |
| License | MIT |
| Last commit | 2026-10-18 |
| Hooks | 3 events |
| Sees | ? calls, Bash|PowerShell calls, Edit|Write|NotebookEdit calls, Edit|Write|NotebookEdit|Bash|PowerShell calls, every prompt |
| Draws on | nothing |
Is guardrails-approval safe to install?
guardrails-approval scores 40/100 on the MCPMods security check: High risk. Things to review: sends data over the network; starts processes outside the sandbox; writes files or config; reads environment variables; watches every prompt or event. It passed 3 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| Sends data over the network | Review |
| Starts processes outside the sandbox | Review |
| Writes files or config | Review |
| Reads environment variables | Review |
| Watches every prompt or event | Review |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.clock.now | |
$.env.get | reads env vars |
$.fs.exists | reads files |
$.fs.read | reads files |
$.fs.write | writes files |
$.http.fetch | network requests |
$.process.run | runs processes |
$.session.cwd | |
$.ui.status | draws interface |
How do I install guardrails-approval?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/scaso01/claude-risk-guardrails claude plugin validate ./claude-risk-guardrails/packs/approval
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add scaso01/claude-risk-guardrails && claude plugin install guardrails-approval@claude-risk-guardrails
Or ask Claude to set it up
Paste this into Claude Code and it installs guardrails-approval for you:
Install the "guardrails-approval" Claude Code mod from https://github.com/scaso01/claude-risk-guardrails/tree/main/packs/approval. Run claude plugin validate on it first and show me what it can access before you enable it.
More from scaso01/claude-risk-guardrails
This repository has 6 Claude Code mods on MCPMods.
- guardrails-challenge: Effective challenge: hold answers to evidence under pushback, and check agents' commit claims against git. (High risk)
- guardrails-development: Development standards: look before building, test what changed, pass the repo's checks, keep the rules in view. (High risk)
- guardrails-monitoring: Ongoing monitoring: keep watching the agent after approval, and watch the controls themselves. (High risk)
- guardrails-outcomes: Outcomes analysis: check what a reply claims against what the evidence supports. (Review before installing)
- guardrails-records: Documentation: leave a trail a reviewer can follow, and keep what can't be rebuilt. (High risk)