All shelves / Mods / Safety
Safety
10 mods. Holds a risky command before it runs.
Plugins that draw inside the session or hold a command before it runs.
How it installs
claude plugin install <mod>@<marketplace>Run in a terminal. Some mods need a restart.- 1blast-radiusAnthropicHolds a shell command such as rm -rf, a force push, a hard reset, or a migration, shows what it would touch, then asks you to proceed or cancel.Holds
- 2merge-gatehamzaferHolds gh pr merge until CI is green and a Codex review has run once, and draws that pull request's status above the prompt.Holds
- PaidTop of this shelf$149 · 30 daysThe first row in Safety, marked as paid.Book
- 3rulebook-guardhamzaferAsks before git commit --amend, an unformatted push, or personal details in notes and commits.Holds
- 4bash-guardSingh-APHolds every Bash call, including under --dangerously-skip-permissions. Blocks rm -rf on a home or system directory, and asks before a force-push, a hard reset, or a pipe into sh.Holds
- 5net-guardSingh-APHolds curl, wget, ssh, scp, git push, and WebFetch, including under --dangerously-skip-permissions. Blocks paste sites and request catchers, and asks before data goes to a host that is not allowed.Holds
- 6file-guardSingh-APHolds writes outside the project and writes into .git, and asks before lockfiles and CI files.Holds
- 7slopsquat-guardSingh-APHolds a package install and checks the name against its registry, so a hallucinated or typosquatted package does not install.Holds
- 8command-explainerSingh-APDraws a plain-English line and a risk level on the permission prompt, so you can see what the command does before you approve it.Draws
- 9secret-guardarasovicHides API keys and private keys before the model or the transcript sees them, blocks reads of credential files and commands that print secrets, and draws a status light for what it caught.Holds
- 10guardrailsarasovicHolds Cloudflare write commands, attribution lines in commits and pull requests, and branch names that start with claude/.Holds
10 mods in Safety
What makes a plugin a mod?
It draws inside the session, like a pane, a status line, or a band above the prompt, or it holds a command before it runs. Plugins that do neither are under Plugins.
What can a mod reach?
Each mod page lists only what the author's README names: usage figures, file edits, tool calls, the network.
Where do the pictures come from?
From the author's repo. When there is no demo, the card shows the GitHub page.







