guard
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval…
Lot de plugins · par TracineHQ
Aperçu
guard est un lot de plugins pour les outils de code IA publié par TracineHQ. Places de marché que nous lisons et qui le référencent : 1 (Claude Code: claude-plugins-community). Nous l'avons vu pour la première fois le 2026-10-11 et n'avons enregistré aucun changement depuis. Selon notre passage sur les places de marché du 2026-10-12.
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval, pipe-to-shell, live credentials (`gh auth token`, `aws sts get-session-token`, `op read`), `git -c core.hooksPath=…` injection, silent commit reuse (`git commit -C HEAD~1`, `--reuse-message`). Each deny names the rule and prints a one-line override (`guard allowlist allow-command …`); decisions stream to a JSONL log the optional CLI reads (`pipx install tracine-guard`, then `guard noisy --since 24h` or `guard trace <session>`). Apache-2.0, no third-party deps. Defense in depth alongside Claude Code's own permissions — especially valuable for autonomous agent windows where no human is present to answer an ASK, so denies act as a hard floor. Not a sandbox or exfiltration boundary; see SECURITY.md.
Ce qu'il demande
- S'installe comme lot de plugins
- Hooks : 8
Ce qu'il déclare, demande et exécute, en détail
N’installez que des plugins de développeurs en qui vous avez confiance. Nous reprenons ce que publient les places de marché et ne testons pas les plugins.
Fonctionne avec
- Claude Code
D'après les marketplaces qui le listent et le transport MCP qu'il déclare, tels que chaque client les documente. Nous ne testons pas les plugins.
Connecter
Pas de données pour une commande automatique : ce que déclarent ses places de marché ne dit pas sans ambiguïté comment le connecter.
Où il est publié
| Place de marché | Statut | Version | Chiffres | Vérifié | Vu pour la première fois |
|---|---|---|---|---|---|
| Claude Code: claude-plugins-community (Ouvrir la source sur GitHub) | Référencé | 1.5.0 | Forks (GitHub): 0 Étoiles (GitHub): 0 |
Non marqué |
Chaque chiffre est celui de la place de marché et n'est jamais additionné entre places de marché. Une place de marché qui ne publie pas de chiffre n'en affiche aucun : pas de nombre ne veut pas dire zéro.
Ce que contient le lot
Tel que publié sur Claude Code: claude-plugins-community.
Commandes: 6
diffnoisysilentstatustesttrace
Hooks: 2
PermissionRequestPreToolUse
Ce qui a changé
Rien n'a bougé sur ce plugin depuis que nous le suivons.
Plugins similaires
Produits dont les noms, descriptions, outils et skills sont les plus proches de celui-ci par le sens, sur toutes les places de marché que nous lisons. La proximité n'est classée qu'à l'intérieur de cette liste.
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration…
-
Blocks Claude Code from writing or committing leaked secrets.
-
A pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval usage, Function constructor abuse, hardcoded…
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
-
Block destructive git and filesystem commands before execution
-
Production protection layer for Claude Code. Hard-blocks destructive operations (force push, DROP TABLE, TRUNCATE, Terraform state edits). P1/P2/P3 incident SLAs with escalation…
-
Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code. Instead of choosing between approving every command manually or giving Claude…
-
Frictionless security, compliance, and threat detection for Claude Code and Co-Work. Advanced Behavioral detection patterns catch credential exfiltration, reverse shells, prompt…
-
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using…
Plugins similaires par place de marché
La même question posée à chaque place de marché séparément : y a-t-il là un équivalent de ce plugin ?
Référencé sur Claude Code: claude-plugins-community (5)
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration…
-
A pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval usage, Function constructor abuse, hardcoded…
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
-
Block destructive git and filesystem commands before execution
-
Production protection layer for Claude Code. Hard-blocks destructive operations (force push, DROP TABLE, TRUNCATE, Terraform state edits). P1/P2/P3 incident SLAs with escalation…
Référencé sur Claude Code: claude-plugins-official (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the…
Référencé sur Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
gk-cli com.gitkraken/gk-cli
The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
-
MCP server for terminal commands, file operations, and process management
Référencé sur Codex: openai-curated (openai/plugins) (5)
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
Référencé sur Community GitHub marketplaces (5)
-
Blocks Claude Code from writing or committing leaked secrets.
-
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
-
Sourcery security findings for AI coding agents: triage and minimal-change remediation via the public Sourcery API (12 MCP tools + skills).
-
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…
-
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
Référencé sur Copilot CLI: github/awesome-copilot (5)
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Plain-English translation layer for non-technical Copilot CLI users. Translates every approval prompt, error message, and technical output into clear, jargon-free English with…
-
Use an installed rhost CLI to run ordinary commands on SSH-reachable Linux hosts with local-like stdin, output, and exit behavior.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
Référencé sur Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Complete bundle: all Microsoft Skills for Fabric for developers and consumers.
-
Navigate and interact with your C++ code using the Microsoft C++ Language Server.
Référencé sur Cursor: cursor/plugins (5)
-
Patterns for designing CLIs that coding agents can run reliably: flags, help with examples, pipelines, errors, idempotency, dry-run.
-
Scaffold and validate new agent plugins.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Internal team workflows for CI, code review, shipping, local automation, and verification.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Référencé sur Docker MCP Catalog (5)
-
MCP server for terminal commands, file operations, and process management
-
Giving Claude ability to run code with E2B via MCP (Model Context Protocol).
-
Bridges multiple AI models and CLIs, enabling orchestrated workflows across Claude Code, Gemini CLI, Codex CLI, and other AI development tools.
-
MCP server for using Semgrep to scan code for security vulnerabilities.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
Référencé sur Official MCP Registry (5)
-
GuardianShield io.github.sparkvibe-io/GuardianShield
AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
-
securecode io.github.juanisidoro/securecode
Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
-
ai-code-scanner io.github.4hmetuyar/ai-code-scanner
Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection
-
Tripwire Guard — evidence-first injection scanner
Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.
-
Merge gates and safety checks for AI coding agents via MCP.
Trouvés par le sens, et non par un code ou un dépôt commun : les plugins similaires restent des produits distincts, et ceci n'est ni un avis ni une recommandation.
C'est votre plugin ?
Ajoutez-le à vos projets et prouvez que vous le maintenez : un fichier dans son dépôt, un fichier sur votre domaine ou un enregistrement DNS. Vous recevez des alertes quand une marketplace le publie, le retire, change sa marque vérifiée ou ce qu'il demande, et son endpoint distant est surveillé comme un service web.
Données issues de Claude Code: claude-plugins-community. Les chiffres proviennent de nos propres passages réguliers sur les places de marché, dernière lecture le . Nous ne publions aucune coordonnée des éditeurs de plugins.