Above Prompt
SubmitAdvertise

All shelves / Mods / Safety

net-guard

By Singh-AP · Checked 2026-10-08

Holds curl, wget, ssh, scp, git push, and WebFetch, including under --dangerously-skip-permissions. Blocks paste sites and request catchers, and asks before data goes to a host that is not allowed.

Holds a command

Install

Copied from the author's repo on 2026-10-08. The marketplace name is awesome-claude-mods.

In your shell
claude plugin marketplace add Singh-AP/awesome-claude-mods
claude plugin install net-guard@awesome-claude-mods
Open the repo

It runs inside the Claude Code process. The side panel is only what the author's README names. Read the repo before you install, or run claude plugin validate on the plugin folder.

Demo

The net-guard example on the author's GitHub page
Screenshot of the author's GitHub page.

Other mods in Safety

blast-radiusAnthropicHolds a commandHolds a shell command such as rm -rf, a force push, a hard reset, or a migration, shows what it would touch, then asks you to proceed or cancel.merge-gatehamzaferHolds a commandHolds gh pr merge until CI is green and a Codex review has run once, and draws that pull request's status above the prompt.rulebook-guardhamzaferHolds a commandAsks before git commit --amend, an unformatted push, or personal details in notes and commits.bash-guardSingh-APHolds a commandHolds every Bash call, including under --dangerously-skip-permissions. Blocks rm -rf on a home or system directory, and asks before a force-push, a hard reset, or a pipe into sh.file-guardSingh-APHolds a commandHolds writes outside the project and writes into .git, and asks before lockfiles and CI files.slopsquat-guardSingh-APHolds a commandHolds a package install and checks the name against its registry, so a hallucinated or typosquatted package does not install.command-explainerSingh-APDraws a plain-English line and a risk level on the permission prompt, so you can see what the command does before you approve it.secret-guardarasovicHolds a commandHides API keys and private keys before the model or the transcript sees them, blocks reads of credential files and commands that print secrets, and draws a status light for what it caught.guardrailsarasovicHolds a commandHolds Cloudflare write commands, attribution lines in commits and pull requests, and branch names that start with claude/.