What is home-path-guard?
home-path-guard is a Claude Code mod by theagitist that flag hardcoded user home paths (/home/, /Users/) you write into files; nudge $HOME / ~ instead. Machine-local (*.local.*) files exempt. Non-blocking. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | theagitist |
| Repository | theagitist/claude-mods |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Low risk (96/100) |
| Rank | #4,805 of 5,272 Claude Code mods; #497 in Security |
| Last commit | 2026-10-04 |
| Hooks | 1 events |
| Sees | every tool call |
| Draws on | nothing |
Is home-path-guard safe to install?
home-path-guard scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 7 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts no processes | Pass |
| Writes no files or config | Pass |
| Doesn't read environment variables | Pass |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| No license detected | Note |
How do I install home-path-guard?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/theagitist/claude-mods claude plugin validate ./claude-mods/home-path-guard
- Install it. Run this in your terminal, then /reload-plugins in an open session.
git clone https://github.com/theagitist/claude-mods && claude --plugin-dir ./claude-mods/home-path-guard
Or ask Claude to set it up
Paste this into Claude Code and it installs home-path-guard for you:
Install the "home-path-guard" Claude Code mod from https://github.com/theagitist/claude-mods/tree/main/home-path-guard. Run claude plugin validate on it first and show me what it can access before you enable it.
More from theagitist/claude-mods
This repository has 5 Claude Code mods on MCPMods.
- box-status: Status line: which box you're on, the out-of-band ping channel it resolves (telegram/email/none), and whether passwordle (Review before installing)
- dot-guard: Block `git add` of a whole $HOME work-tree (dot add -A/./*), which would stage your entire home directory. (Low risk)
- emdash-watch: Flag em-dashes you introduce into public-facing prose (notes, docs, READMEs, HTML); internal files (CLAUDE.md, memory) a (Low risk)
- idle-ping: When a turn that did real work ends, ping the user out of band (Telegram if a bot token + TELEGRAM_CHAT_ID are set, else (Review before installing)