package-guard 0.5.0
Before Claude installs or runs a package (npm, pnpm, yarn, bun, npx, pip, uv, poetry, pipx, cargo), asks the public registry about it. Holds the command when the package does not exist (a made-up name), is under 14 days old, or looks like a well-known package and is young or thin (typosquatting)....
Lupus Malus DeviantInstall
/plugin marketplace add LupusMalusDeviant/claude-mods /plugin install package-guard@claude-mods
Run both lines inside Claude Code.
Hooks into
- Prompt
Also in LupusMalusDeviant/claude-mods
-
read-guard
0.5.0
Holds a whole-file Read (no offset/limit) of a file above the limit, a lockfile, minified code or a source map, and the same via cat, type or Get-Content in the shell; tells Claude the size, a token estimate and a better way (Grep, offset/limit). A second try at the same file goes through. Claude...
Lupus Malus Deviant in Usage & cost, updated
0
-
pet
0.5.0
A little cardboard box on the Windows desktop, always on top, that says in a speech bubble what Claude is doing: the file it reads or changes, the command that runs, what a guard held, and a short summary at the end of a turn. Drag it anywhere, right-click for quiet time. Built once with the C# c...
Lupus Malus Deviant in Guardrails, updated
0
-
cache-meter
0.4.1
Band: time left on the warm cache, hit rate, context as weather, plan limits, compact and keep-warm buttons; stops one send to a cold cache and names its cost (Cache Tax runs inside).
Lupus Malus Deviant in Usage & cost, updated
0
-
subagent-saver
0.4.1
Search subagents (Explore) that were given no model of their own run on a cheaper one instead of the main model. An explicit model, forks, teammates and plugin agents stay untouched.
Lupus Malus Deviant in Prompt, updated
0
-
secret-guard
0.4.1
Stops before Claude writes API keys, tokens, private keys or a non-ignored .env into files, git add or commits. Exceptions for test keys and example files: /secret-allow.
Lupus Malus Deviant in Git, updated
0
-
ci-watch
0.4.1
After every git push, follows the GitHub Actions runs (via gh) until they finish; with an open pull request (also after gh pr create, or /ci pr <nr>) all its checks, other CI included, and whether it is ready to merge. On red it shows the failed step log.
Lupus Malus Deviant in Git, updated
0
-
sign-guard
0.4.1
Spots Windows builds (cargo --release, dotnet publish, go build, pyinstaller, tauri, electron-builder, msbuild) and signs the new .exe/.msi/.msix with your own signing script.
Lupus Malus Deviant in Guardrails, updated
0
-
handoff
0.4.1
/handoff writes a handoff note to .claude/handoff.local.md; a new session offers to continue from it.
Lupus Malus Deviant in Prompt, updated
0
-
heads-up
0.4.1
A second model reads longer answers and raises one easily missed but important point.
Lupus Malus Deviant in Prompt, updated
0
-
blast-radius
0.4.1
Holds risky shell commands (rm -rf, git reset --hard, git clean, force push, migrations) and shows what they would hit.
Lupus Malus Deviant in Git, updated
0
More guardrails mods
-
blast-radius
0.1.0
See what a risky command would change before it runs.
You in Guardrails, updated
247.7k
-
agents-md
0.1.0
AGENTS.md as project instructions, by one option. Under claude-md-or-agents-md a project with no instruction files of its own gets its AGENTS.md files instead: a prompt.context hook asks $.fs.ancestors for every AGENTS.md and .claude/AGENTS.md from the filesystem root down to the working director...
Anthropic in Guardrails, updated
150.3k
-
ruflo-rvf
0.3.6
mod + skill
RVF format for portable agent memory, session persistence, and cross-platform transfer. As a mod (ADR-445): a write guard that keeps secrets out of memory, sessions and transfers, /rvf-mod, and a status file the console shows
ruvnet in Guardrails, updated
74.4k
-
openviking-memory
0.7.7
mod + skill
Long-term semantic memory for Claude Code, powered by OpenViking. Auto-recall relevant memories at session start and capture important information during conversations.
OpenViking in Guardrails, updated
39.7k
-
tool-timing-badge
0.2.0
Times every tool call and wraps the engine's ToolUse rendering with a colored duration badge from the surface's own element table, on the terminal, Desktop and mobile. Hooks tool.call and ui.render using JSX.
claude-code-templates in Guardrails, updated
32.6k