Guardrails
335 mods. Block, rewrite or audit tool calls before they run.
-
ruflo-neural-trader
0.3.4
mod + skill
Neural trading via npx neural-trader — self-learning strategies, Rust/NAPI backtesting, 112+ MCP tools, swarm coordination, and portfolio optimization. As a mod (ADR-445): a tighten-only guard on its tools, /trader-mod, and a status file the console shows
ruvnet in Guardrails, updated
74.2k
-
ruflo-observability
0.3.3
mod + skill
Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry. As a mod (ADR-445): a tighten-only guard on its tools, /observe-mod, and a status file the console shows
ruvnet in Guardrails, updated
74.2k
-
ruflo-business-pods
0.2.3
mod + skill
ADR-164 Phase 2 — business-domain pod templates for the federated business autopilot. Ships the sales pod template (templates/sales.json) and a single-tick runner (scripts/pod-tick.mjs) that pre-flights templates via business_pod_validate, reserves budget through a file-based stub ledger (atomic ...
ruvnet in Guardrails, updated
74.2k
-
ruflo-bbs-federation
0.3.3
mod + skill
AgentBBS cross-host agent federation for ruflo (ADR-164). Phase 1 exposes room coordination — federation_bbs_register / federation_bbs_publish / federation_bbs_watch / federation_bbs_human_join. Phase 2 (v3.40.0) adds signed cross-host federation — federation_bbs_identity (persistent Ed25519 node...
ruvnet in Guardrails, updated
74.2k
-
ruflo-security-audit
0.3.3
mod + skill
Security review, dependency scanning, policy gates, and CVE monitoring
ruvnet in Guardrails, updated
74.2k
-
ruflo-knowledge-graph
0.3.3
mod + skill
Knowledge graph construction — entity extraction, relation mapping, and pathfinder graph traversal. As a mod (ADR-445): keeps secrets out of the graph, confirms graph deletes, /kg-mod, and a status file the console shows
ruvnet in Guardrails, updated
74.2k
-
ruflo-deepseek-harness
0.2.3
mod + skill
DeepSeek model harness for ruflo — agents, commands, scripts, and skills for running and evaluating DeepSeek-backed workflows within the ruflo swarm.
ruvnet in Guardrails, updated
74.2k
-
ruflo-graph-intelligence
0.2.0-alpha.5
RuFlo Graph Intelligence Engine — real-time relationship intelligence with complexity-aware execution. Single-entry personalized PageRank, streaming delta updates, witness-signed reasoning artifacts, federation-distributable PR vectors. Built on [email protected].
ruvnet in Guardrails, updated
74.2k
-
ruflo-chatgpt-federation
0.2.3
Dedicated ChatGPT Federation MCP publisher with isolated Nostr signing-key custody, OAuth-scoped publishing, and signed public-channel coordination over the Ruflo relay. As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.
ruvnet in Guardrails, updated
74.2k
-
ruflo-protector
0.1.1
Project Anatole: an optional, learning watchdog for unattended agents. Deterministic OWASP-mapped rules, a per-project behavioural baseline, four modes (off, learn, notify, enforce), alerts you can read later.
ruvnet in Guardrails, updated
74.2k
-
openviking-memory
0.7.6
mod + skill
Long-term semantic memory for Claude Code, powered by OpenViking. Auto-recall relevant memories at session start and capture important information during conversations.
OpenViking in Guardrails, updated
39.5k
-
tool-timing-badge
0.2.0
Times every tool call and wraps the engine's ToolUse rendering with a colored duration badge from the surface's own element table, on the terminal, Desktop and mobile. Hooks tool.call and ui.render using JSX.
claude-code-templates in Guardrails, updated
32.5k
-
secret-redactor
0.2.0
Redacts API keys, tokens, JWTs, private keys and connection strings from every tool result before the model reads them, notes the redaction through context, and refuses to echo a redacted placeholder back into a Bash command. A tool.call hook in the after placement.
claude-code-templates in Guardrails, updated
32.5k
-
webfetch-cache
0.2.0
Short-circuits repeated WebFetch calls for the same URL and prompt within a session, answering { result } from cache without a network round trip. A tool.call hook with TTL and size limits.
claude-code-templates in Guardrails, updated
32.5k
-
websearch-to-exa
0.2.0
Overrides the built-in WebSearch tool and routes queries to the Exa search API through $.http.fetch, answering in WebSearch's own result shape, with automatic fallback to the built-in search. A tool.call hook that replaces a core tool.
claude-code-templates in Guardrails, updated
32.5k
-
protected-paths-guard
0.2.0
Denies Edit, Write and NotebookEdit calls on sensitive paths (.env files, lockfiles, CI workflows, git internals, private keys) with a glob allowlist override. A tool.call hook with an array matcher.
claude-code-templates in Guardrails, updated
32.5k
-
large-edit-confirmation
0.2.0
Asks the user, in the engine's AskUserQuestion dialog ($.ui.ask), before Claude edits or overwrites a file larger than a configurable line count; denies by default when nobody can answer (headless runs). A tool.call hook on Edit and Write using $.fs.read.
claude-code-templates in Guardrails, updated
32.5k
-
pi-agent-for-claude
0.1.0
mod + skill
pi agent for claude: a `pi` subagent type whose model steps run the pi CLI, so pi subagents and agent-team teammates live in Claude Code's own agent UI, streamed live, on any model pi can reach.
Fazal Ali in Guardrails, updated
32.5k
-
npm-to-pnpm-rewriter
0.2.0
Rewrites npm and npx invocations to pnpm (or yarn / bun) before the Bash tool runs them and tells the model what ran through context. A tool.call hook that forwards a modified event (the modifying placement).
claude-code-templates in Guardrails, updated
32.5k
-
block-destructive-commands
0.2.0
Denies Bash commands that match destructive patterns (recursive rm on roots, force push, hard reset, destructive SQL, disk formatting) before they run. A tool.call hook with a Bash matcher that returns { deny } without calling next.
claude-code-templates in Guardrails, updated
32.5k
-
admin-capability-lockdown
0.2.0
Organization control mod: withholds the http and process nouns from $ so no plugin beneath it can reach the network or spawn processes, refuses user-tier plugins by name allowlist or by the $ calls their source declares, and withholds the Bash tool (shellPolicy "deny", default) or, in "guardrail"...
claude-code-templates in Guardrails, updated
32.5k
-
agentic-qe-fleet
3.15.0
mod + skill
PACTS-based agentic quality engineering fleet — 11 specialized QE agents, sublinear coverage analysis, chaos/resilience testing, and TDD skills for Claude Code
Agentic QE in Guardrails, updated
495
-
blast-radius
0.1.0
Holds risky shell commands (rm -rf, git reset --hard, git clean, force push, migrations) and shows what they would change, with Proceed and Cancel buttons.
Claude Code DevRel in Guardrails, updated
179
-
blast-radius
0.2.2
Holds risky Bash commands and shows what they would change before they run.
Hamza Zafar in Guardrails, updated
170
-
agent-state-observer
0.1.0
Observe-only: writes the agent's state (working / idle / awaiting_approval / ended), its transitions and its rate-limit readings to a JSON file. Never blocks, rewrites or delays anything.
Marveen in Guardrails, updated
117
-
genesis-web-override
0.1.0
Answers Claude Code's built-in WebSearch with Genesis's web_search chain, falling back to the built-in on any failure. Needs CLAUDE_CODE_ENABLE_FUNCTION_HOOKS=1.
WingedGuardian in Guardrails, updated
96
-
my-privacy-audit-mock
0.1.0
Offline synthetic model stream audit
Local audit in Guardrails, updated
72
-
read-only-mode
1.0.0
Toggle a reminder guard that refuses built-in mutating tools and Bash.
Yash Thakker in Guardrails, updated
42
-
read-counter-example
0.1.0
Teaching example: count successful Read events.
Prompt Advisers in Guardrails, updated
40
-
program-status
0.1.0
Reports the session state to the terminal (OSC 7501) through the program-status command.
chaosteil in Guardrails, updated
38