What is guardrails?
guardrails is a Claude Code mod by lucasleandro08 that stops risky shell commands before they run: killing ports owned by Docker containers, printing secrets from the environment, rewriting your kubeconfig, and asks before kubectl writes on. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | lucasleandro08 |
| Repository | lucasleandro08/claude-mods |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Review before installing (76/100) |
| Rank | #3,850 of 5,272 Claude Code mods; #406 in Security |
| License | MIT |
| Last commit | 2026-10-13 |
| Hooks | 1 events |
| Sees | Bash calls |
| Draws on | nothing |
Is guardrails safe to install?
guardrails scores 76/100 on the MCPMods security check: Review before installing. Things to review: starts processes outside the sandbox; reads environment variables. It passed 6 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts processes outside the sandbox | Review |
| Writes no files or config | Pass |
| Reads environment variables | Review |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.env.get | reads env vars |
$.fs.read | reads files |
$.process.run | runs processes |
$.state.get | |
$.state.set | |
$.ui.ask | draws interface |
How do I install guardrails?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/lucasleandro08/claude-mods claude plugin validate ./claude-mods/plugins/guardrails
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add lucasleandro08/claude-mods && claude plugin install guardrails@dracula-mods
Or ask Claude to set it up
Paste this into Claude Code and it installs guardrails for you:
Install the "guardrails" Claude Code mod from https://github.com/lucasleandro08/claude-mods/tree/main/plugins/guardrails. Run claude plugin validate on it first and show me what it can access before you enable it.
More from lucasleandro08/claude-mods
This repository has at least 9 Claude Code mods on MCPMods.
- aws-profile: Shows each AWS profile above the prompt with whether its login still works, a one-click `aws sso login` in the app's Ter (Review before installing)
- codex-loop: /codex-loop hands Claude a review loop with the Codex GitHub bot: request a review, weigh each finding, fix or 👎 it, rep (Low risk)
- deploy-watch: Watches AWS CodeBuild projects: a chip above the prompt with the last build, a warning when a push to the deploy branch (Review before installing)
- docker-pane: A Docker chip above the prompt and a Dracula-themed containers pane grouped by compose project: ports, health, Start/Sto (Review before installing)
- dot: An always-on assistant with a name and a face: give it goals, and it keeps working on them in background rounds, asks be (Review before installing)
- kube-pane: A kubectl context chip above the prompt and a Dracula-themed pods pane: switch context for Claude's session without touc (Review before installing)
- live-diff: A Dracula-themed pane with the diff of every Edit and Write Claude makes in the session, a file navigator and line numbe (Low risk)
- mod-manager: A Dracula-themed pane to install the Dracula mods and turn them on and off. Every other mod ships off; this one lists th (Review before installing)