Above Prompt

All shelves / Mods / Safety

Safety

10 mods. Holds a risky command before it runs.

Plugins that draw inside the session or hold a command before it runs.

How it installsclaude plugin install <mod>@<marketplace>Run in a terminal. Some mods need a restart.
  1. 1blast-radiusAnthropicHolds a shell command such as rm -rf, a force push, a hard reset, or a migration, shows what it would touch, then asks you to proceed or cancel.Holds
  2. 2merge-gatehamzaferHolds gh pr merge until CI is green and a Codex review has run once, and draws that pull request's status above the prompt.Holds
  3. 3rulebook-guardhamzaferAsks before git commit --amend, an unformatted push, or personal details in notes and commits.Holds
  4. 4bash-guardSingh-APHolds every Bash call, including under --dangerously-skip-permissions. Blocks rm -rf on a home or system directory, and asks before a force-push, a hard reset, or a pipe into sh.Holds
  5. 5net-guardSingh-APHolds curl, wget, ssh, scp, git push, and WebFetch, including under --dangerously-skip-permissions. Blocks paste sites and request catchers, and asks before data goes to a host that is not allowed.Holds
  6. 6file-guardSingh-APHolds writes outside the project and writes into .git, and asks before lockfiles and CI files.Holds
  7. 7slopsquat-guardSingh-APHolds a package install and checks the name against its registry, so a hallucinated or typosquatted package does not install.Holds
  8. 8command-explainerSingh-APDraws a plain-English line and a risk level on the permission prompt, so you can see what the command does before you approve it.Draws
  9. 9secret-guardarasovicHides API keys and private keys before the model or the transcript sees them, blocks reads of credential files and commands that print secrets, and draws a status light for what it caught.Holds
  10. 10guardrailsarasovicHolds Cloudflare write commands, attribution lines in commits and pull requests, and branch names that start with claude/.Holds

10 mods in Safety

What makes a plugin a mod?

It draws inside the session, like a pane, a status line, or a band above the prompt, or it holds a command before it runs. Plugins that do neither are under Plugins.

What can a mod reach?

Each mod page lists only what the author's README names: usage figures, file edits, tool calls, the network.

Where do the pictures come from?

From the author's repo. When there is no demo, the card shows the GitHub page.