What is pkg-guard?
pkg-guard is a Claude Code mod by MDmubarak786 that hold npm, pnpm, yarn, pip, uv, and cargo installs of packages that don't exist, are brand new, or are barely downloaded, with the registry facts in the question. Catches hallucinated and. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | MDmubarak786 |
| Repository | MDmubarak786/claude-mods |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Low risk (88/100) |
| Rank | #3,951 of 5,272 Claude Code mods; #415 in Security |
| License | MIT |
| Last commit | 2026-10-16 |
| Hooks | 3 events |
| Sees | Bash calls |
| Draws on | nothing |
Is pkg-guard safe to install?
pkg-guard scores 88/100 on the MCPMods security check: Low risk. Things to review: sends data over the network. It passed 7 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| Sends data over the network | Review |
| Starts no processes | Pass |
| Writes no files or config | Pass |
| Doesn't read environment variables | Pass |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.command.register | |
$.fs.exists | reads files |
$.fs.read | reads files |
$.http.fetch | network requests |
$.store.get | keeps its own state |
$.store.set | keeps its own state |
$.ui.ask | draws interface |
$.ui.log | draws interface |
How do I install pkg-guard?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/MDmubarak786/claude-mods claude plugin validate ./claude-mods/mods/pkg-guard
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add MDmubarak786/claude-mods && claude plugin install pkg-guard@modhub
Or ask Claude to set it up
Paste this into Claude Code and it installs pkg-guard for you:
Install the "pkg-guard" Claude Code mod from https://github.com/MDmubarak786/claude-mods/tree/main/mods/pkg-guard. Run claude plugin validate on it first and show me what it can access before you enable it.
More from MDmubarak786/claude-mods
This repository has at least 9 Claude Code mods on MCPMods.
- big-output: Keep huge shell output out of the context window. A Bash result over a threshold is saved to a file and Claude gets its (Review before installing)
- bingo: Classic 75-ball bingo, you against Claude. Numbers are called, you mark your card and shout Bingo first; Claude plays a (Low risk)
- circuit-breaker: Stop Claude from retrying the same failing shell command over and over. After N identical failures the next attempt is h (Low risk)
- connect-four: Connect Four against Claude, in a pane. Press a column's digit to drop a disc; Claude answers in half a second at three (Low risk)
- copy-last: Copy Claude's last reply, or its last code block, to the clipboard as clean Markdown with /copy, with no terminal indent (Low risk)
- ding: Play a sound and post a desktop notification when Claude finishes a turn or needs you to answer a question or a permissi (Low risk)
- dino: The Chrome dinosaur runner in a pane. Press w to jump the cacti; the ground speeds up as you go, and your best distance (Low risk)
- fence: Limit which paths Claude may edit in a project with one /fence command. Edits outside the fence are refused with a reaso (Low risk)