scope-watch 0.1.0
Set the folder you are working in; when Claude edits a file outside it, you get a toast and Claude gets a short note to check the edit was intended. Never blocks.
Install
/plugin marketplace add samuelbfernandes/moddeck /plugin install scope-watch@moddeck
Run both lines inside Claude Code.
Hooks into
- Tool calls
- Toasts
- Slash commands
Also in samuelbfernandes/moddeck
- repro-log 0.1.0 Keeps a reproducibility recipe for data work: the analysis commands that succeeded and the files you changed. /repro writes it to .moddeck/repro/ with git commit, versions, lock files, seeds and a runnable command list. Secrets are never written. 1
- data-guard 0.1.0 Asks before a git commit or git add takes in large files, data files, personal-looking table columns or Jupyter notebooks with outputs. Only names are ever shown, never file contents. 1
- concise 0.1.1 While switched on, every prompt carries rules that shape Claude's replies so you can act on them: the next action first, numbered steps, state restated each turn, no tangents, specific time estimates. Off until you type /concise on. 1
- auto-test 0.1.1 Runs the project's tests once at the end of a turn in which Claude edited files, and shows a green or red result. Off until you type /auto-test on. 1
- big-file-guard 0.1.0 Saves tokens: when the model reads a large data or log file whole, it gets the first lines and a note, unless it asks for a range itself. 1
- branch-janitor 0.4.5 Watches your git branches by itself (nothing to run) and notices when a branch's work is done (merged, squash-merged, pull request merged), even if you merged in a plain terminal. Checks it is safe to delete and offers to delete it. Never deletes without a click; the remote copy is a second, sepa... 1
- checkpoint 0.1.0 One-click safety snapshots of your working tree (untracked files too) that never touch your branch, index or stash. /checkpoint, list, diff, restore, drop. Restore shows what would be lost and asks first. 1
- command-guard 0.3.3 Holds risky Bash commands (rm -rf, git reset --hard, force push, DROP TABLE ...), shows exactly what they would destroy, and asks first. A safety net, not a permission system. 1
- decision-log 0.1.0 /decision <text> [-- rationale] adds a dated row to the project's docs/DECISIONS.md (the agents-md-scaffold table); /decision-log shows the last 20. Writes only that file, only when asked. 1
- diagram 0.1.1 Draws the last mermaid diagram from Claude's answer as box art in a pane: run /diagram to open it. Flowcharts, sequence diagrams and pie charts; offline, no model tokens. 1
More guardrails mods
- blast-radius 0.1.0 See what a risky command would change before it runs. 279.9k
- agents-md 0.1.0 AGENTS.md as project instructions, by one option. Under claude-md-or-agents-md a project with no instruction files of its own gets its AGENTS.md files instead: a prompt.context hook asks $.fs.ancestors for every AGENTS.md and .claude/AGENTS.md from the filesystem root down to the working director... 155.5k
- claude-mem 15.12.1 mod + skill Persistent memory for AI coding agents: the next session starts where the last one left off. Works with Claude Code, Codex, Cursor, OpenCode and more. 114.9k
- ruflo-rvf 0.3.7 mod + skill RVF format for portable agent memory, session persistence, and cross-platform transfer. As a mod (ADR-445): a write guard that keeps secrets out of memory, sessions and transfers, /rvf-mod, and a status file the console shows 81.6k
- openviking-memory 0.7.22 mod + skill Long-term semantic memory for Claude Code, powered by OpenViking. Auto-recall relevant memories at session start and capture important information during conversations. 42.1k