Toasts

Go make coffee: a desktop notification, a chime, and optionally a phone push when a long Claude turn finishes or Claude is waiting on you.

Reusable prompts one command away: /snip review drops your saved review prompt into the prompt box, with {{selection}}, {{branch}}, {{date}} and {{args}} filled in.

A seatbelt for YOLO mode: blocks catastrophic shell commands (rm -rf ~, mkfs, dd to a disk, fork bombs) and asks before risky ones (force-push, reset --hard, DROP TABLE, curl | sh), even with permissions bypassed.

Keeps Claude's file edits inside the project: refuses writes outside it (symlinks resolved), never lets a tool touch .git internals, and asks before it changes lockfiles, CI workflows, migrations or secrets.

Defuses prompt injection in tool output: strips invisible Unicode that hides text from you but not from the model, and flags web pages, files and command output that carry instructions aimed at Claude.

Stops data exfiltration and surprise network calls: checks every curl, wget, ssh, scp, git push and WebFetch against allow and deny lists, and asks before data goes to a host you haven't approved.

Keeps secrets out of Claude's context: API keys, tokens, private keys and passwords in tool output are replaced with [REDACTED:kind] before the model or the transcript ever sees them.

Stops Claude from installing hallucinated or typosquatted packages: every npm, pip, uv, poetry, cargo and gem install is checked against its registry first. Packages that don't exist are blocked; brand-new, barely used or lookalike packages ask you first.