Toasts

Supabase guard: stops Supabase calls aimed at a project other than the current folder's, and asks in a one-key popup before destructive SQL, branch resets or project pauses. /supaor toggles. Hungarian or English.

Sound packs for the moments that need you: a prompt sent, a permission prompt, a long job done, a subagent back, a failed test, a git push, a compaction. Packs from StarCraft, Warcraft, Age of Empires, Command & Conquer, Diablo, Counter-Strike, Duke Nukem, Rick and Morty, The Big Lebowski and more; add your own

Defuses prompt injection in tool output: strips invisible Unicode that hides text from you but not from the model, and flags web pages, files and command output that carry instructions aimed at Claude.

Keeps secrets out of Claude's context: API keys, tokens, private keys and passwords in tool output are replaced with [REDACTED:kind] before the model or the transcript ever sees them.

Stops Claude from installing hallucinated or typosquatted packages: every npm, pip, uv, poetry, cargo and gem install is checked against its registry first. Packages that don't exist are blocked; brand-new, barely used or lookalike packages ask you first.

Cuando Claude va a borrar algo, en vez de borrarlo lo manda a una papelera (~/.papelera-claude) para que puedas recuperarlo. /papelera te enseña qué hay dentro.

Routes heavy Bash commands (test suites, builds, Docker) to a second machine over ssh, with the PATH export and working directory already right, and the commit synced first.

Keeps subagents small: tells the main agent how to size and split work, asks a growing subagent to checkpoint, and refuses its tools past a hard limit so a fresh agent takes over

Windows only: a small floating strip over Windows Terminal that previews each [Image #N] you paste or drop, until you send

Inline #tokens that attach live context to a prompt: #diff, #staged, #log:20, #tree, #todo, #errors, #file:path:10-40, #url:https://...

Asks before sending a huge pasted log, stack trace, JSON or CSV: shrink it to a digest (head, tail, error lines) and save the full text under .claude/pastes, or send it as is.

Flags pasted code that carries someone else's license or copyright header.

Flags weak cryptography: MD5 or SHA1 for passwords, Math.random for tokens, ECB mode, hard-coded IVs.

Flags typosquatted or brand-new packages before npm, pip or cargo installs them.

Warns when an edited file grows past a size that hurts readability.

Flags log statements that print emails, passwords, tokens or other personal data.

One helpful toast per session per trigger, in the classic paperclip voice: when you edit a migrations folder, a Dockerfile or a GitHub workflow, or run rm -rf. At most one toast per turn.

Reminds you to /clear or /compact when the context window passes 75 percent.

Three quiet nudges in one mod: commit after 8 edits, TODO/FIXME/HACK lines added, and debug prints added.

At turn end, one toast when dependencies in package.json, pyproject.toml, Cargo.toml or go.mod changed and neither the matching lockfile was edited nor an install command ran.

Two turn-end reminders in one mod: test-reminder and ctx-nudge.

Three quiet nudges in one mod: type check after TypeScript edits, lockfile after dependency edits, and a split suggestion past 500 changed lines.

The three original stats mods in one: /wrapped (copied to your clipboard), streaks and achievements on one shared daily rollup.

Bouncer for Claude Code: enforce condition-based markdown guardrail rules on tool calls — deny or annotate any call whose content matches, instead of file-path-only rules.