What is repo-guard?
repo-guard is a Claude Code mod by YuehengHan that blocks destructive git commands and asks before Claude first edits a repo other than the session's own. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | YuehengHan |
| Repository | YuehengHan/my-claude-mods |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Low risk (96/100) |
| Rank | #5,224 of 5,272 Claude Code mods; #535 in Security |
| Last commit | 2026-10-09 |
| Hooks | 2 events |
| Sees | every tool call |
| Draws on | nothing |
Is repo-guard safe to install?
repo-guard scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 7 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts no processes | Pass |
| Writes no files or config | Pass |
| Doesn't read environment variables | Pass |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| No license detected | Note |
API calls in its code
| Call | What it means |
|---|---|
$.fs.exists | reads files |
$.session.cwd | |
$.ui.toast | draws interface |
How do I install repo-guard?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/YuehengHan/my-claude-mods claude plugin validate ./my-claude-mods/plugins/repo-guard
- Install it. Run this in your terminal, then /reload-plugins in an open session.
git clone https://github.com/YuehengHan/my-claude-mods && claude --plugin-dir ./my-claude-mods/plugins/repo-guard
Or ask Claude to set it up
Paste this into Claude Code and it installs repo-guard for you:
Install the "repo-guard" Claude Code mod from https://github.com/YuehengHan/my-claude-mods/tree/main/plugins/repo-guard. Run claude plugin validate on it first and show me what it can access before you enable it.
More from YuehengHan/my-claude-mods
This repository has at least 9 Claude Code mods on MCPMods.
- claude-mood: Claude's mood in the status line, from what the turn has read, written and broken (High risk)
- claude-pet: A pet in the status line that levels up with your work, gets dizzy on errors, sleeps when you're away, and unlocks achie (High risk)
- control-tower: /tower: one pane showing every Claude Code session on this machine — which is working, which waits for you, which is don (High risk)
- done-ping: When a long turn finishes or Claude needs you: a macOS notification with a distinct sound for done, failed and needs-you (Review before installing)
- fortune: Programmer jokes after the working spinner, and a daily fortune (/fortune) — 今日宜重构，忌周五上线 (Review before installing)
- sdk-sync: After an SDK release (v* tag): /release-check gathers what changed and asks Claude for a read-only audit of the sibling (Review before installing)
- tldr: A one-line TL;DR under every long answer, written by Haiku, so a session you switch back to reads at a glance (Low risk)
- where-am-i: A band above the prompt: repo, branch, uncommitted changes and this session's task (Low risk)