guard
by dvakatsiienko · ★ 0 · updated yesterday
reads every Bash call and fork spawn before it runs: a floor command, a known hazard shape or a fork with no why-fork line is refused with its safe door, never a dialog; each refusal and escape shows in stash's band as a 🛡️ line
Install
git clone https://github.com/dvakatsiienko/frameclaude --plugin-dir ./frame/home/.claude/plugin-x/mods/guardThen run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.
What it hooks into
From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.
- Events
tool.callagent.spawn- API calls
$.clock.now$.env.get$.fs.list$.fs.read$.session.cwd$.session.id$.store.delete$.store.keys$.store.set$.ui.log- Can see
Bash callssubagent spawns- Reach
- level 1 of 3 reads filesreads env varspersists statedraws
Origin
- How it got here
- Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
- Repository
- github.com/dvakatsiienko/frame
- Path in repo
home/.claude/plugin-x/mods/guard- Source commit
a3a6862the exact code the scan read- Author
- @dvakatsiienko
- License
- MIT
- First published
- Last pushed
- First listed here
Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.
More from dvakatsiienko/frame
breather
dvakatsiienko/frame
a breathing band above the prompt while claude works, terminal + desktop (forked from mindful-claude 2.0.0, MIT)
redact
dvakatsiienko/frame
keeps secrets out of every transcript: api keys, tokens and private keys read as a stable placeholder in every kept row, and come back only inside the tool call that names them
stash
dvakatsiienko/frame
dima's command center above the prompt, one folded row with three features: asks (every live session's open ⏳ asks, copy all per thread), afk (one switch every session obeys) and holds (no two sessions write the same file)