Package Guard 0.7.1
Before Claude installs or runs a package (npm, pnpm, yarn, bun, npx, pip, uv, poetry, pipx, cargo), asks the public registry about it. Holds the command when the package does not exist (a made-up name), is under 14 days old, or looks like a well-known package and is young or thin (typosquatting)....
Lupus Malus DeviantInstall
/plugin marketplace add LupusMalusDeviant/mod-box /plugin install package-guard@mod-box
Run both lines inside Claude Code.
Hooks into
- Prompt
Also in LupusMalusDeviant/mod-box
-
CI Watch
0.7.1
After every git push, follows the GitHub Actions runs (via gh) until they finish; with an open pull request (also after gh pr create, or /ci pr <nr>) all its checks, other CI included, and whether it is ready to merge. On red it shows the failed step log.
Lupus Malus Deviant in Git, updated
1
-
Handoff Note
0.7.1
/handoff writes a handoff note to .claude/handoff.local.md; a new session offers to continue from it.
Lupus Malus Deviant in Prompt, updated
1
-
Desktop Pet
0.7.1
A desktop pet and little companion on the Windows desktop, always on top and in front of borderless games: a cardboard box or one of twelve figures (cat, dog, fox, bunny, hamster, owl, penguin, frog, axolotl, dragon, robot, ghost; cat, dog and bunny in nine coats). It says in a speech bubble what...
Lupus Malus Deviant in Notifications, updated
1
-
Read Guard
0.7.1
Holds a whole-file Read (no offset/limit) of a file above the limit, a lockfile, minified code or a source map, and the same via cat, type or Get-Content in the shell; tells Claude the size, a token estimate and a better way (Grep, offset/limit). A second try at the same file goes through, and so...
Lupus Malus Deviant in Usage & cost, updated
1
-
Screen Mask
0.7.1
For screen sharing and recordings: hides API keys, tokens, private keys, e-mail addresses, IP addresses, your login name in paths and any names you list. Only the display changes; Claude still reads the original. Nothing leaves the machine. /mask switches it.
Lupus Malus Deviant in Usage & cost, updated
1
-
Secret Guard
0.7.1
Stops before Claude writes API keys, tokens, private keys or a non-ignored .env into files, git add or commits. Exceptions for test keys and example files: /secret-allow.
Lupus Malus Deviant in Guardrails, updated
1
-
Sign Guard
0.7.1
Spots Windows builds (cargo --release, dotnet publish, go build, pyinstaller, tauri, electron-builder, msbuild) and signs the new .exe/.msi/.msix with your own signing script.
Lupus Malus Deviant in Guardrails, updated
1
-
Subagent Saver
0.7.1
Search subagents (Explore) that were given no model of their own run on a cheaper one instead of the main model. An explicit model, forks, teammates and plugin agents stay untouched. With Claude Code's own CLAUDE_CODE_SUBAGENT_MODEL set (for all subagents), the mod stays out.
Lupus Malus Deviant in Prompt, updated
1
-
Mod Box
0.7.0
mod + skill
21 Claude Code mods in one plugin, each switchable on its own; /mod-box opens the window to switch, configure and import mods.
Lupus Malus Deviant in Other, updated
1
More guardrails mods
-
blast-radius
0.1.0
See what a risky command would change before it runs.
deepseek-ai in Guardrails, updated
269.9k
-
agents-md
0.1.0
AGENTS.md as project instructions, by one option. Under claude-md-or-agents-md a project with no instruction files of its own gets its AGENTS.md files instead: a prompt.context hook asks $.fs.ancestors for every AGENTS.md and .claude/AGENTS.md from the filesystem root down to the working director...
Anthropic in Guardrails, updated
154.3k
-
ruflo-rvf
0.3.7
mod + skill
RVF format for portable agent memory, session persistence, and cross-platform transfer. As a mod (ADR-445): a write guard that keeps secrets out of memory, sessions and transfers, /rvf-mod, and a status file the console shows
ruvnet in Guardrails, updated
80.7k
-
openviking-memory
0.7.21
mod + skill
Long-term semantic memory for Claude Code, powered by OpenViking. Auto-recall relevant memories at session start and capture important information during conversations.
OpenViking in Guardrails, updated
41.4k
-
tool-timing-badge
0.2.0
Times every tool call and wraps the engine's ToolUse rendering with a colored duration badge from the surface's own element table, on the terminal, Desktop and mobile. Hooks tool.call and ui.render using JSX.
claude-code-templates in Guardrails, updated
33.1k