blast-radius
Holds risky Bash commands and shows what they would change before they run.
Pacote de plugins · de Hamza Zafar
Resumo
blast-radius é um pacote de plugins para ferramentas de programação com IA publicado por Hamza Zafar. Marketplaces que lemos e que o listam: 1 (Community GitHub marketplaces). A última mudança que registramos foi em 2026-10-22. Conforme nossa passagem pelos marketplaces em 2026-10-22.
O que pede
- Instala-se como pacote de plugins
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Funciona com
- Claude Code
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como plugin do Claude Code
Gerado a partir do que Community GitHub marketplaces declara.
/plugin marketplace add hamzafer/claude-code-mods
/plugin install blast-radius@claude-code-modsOnde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Marketplace da comunidade hamzafer/claude-code-mods (Abrir o código no GitHub) | Listado | 0.2.3 | Forks (GitHub): 35 Estrelas (GitHub): 348 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
Listado em um marketplace da comunidade
| Marketplace | Repositório | Estrelas (GitHub) |
|---|---|---|
| claude-code-mods | hamzafer/claude-code-mods | 348 |
Como os números mudaram
- 2026-10-2134
- 2026-10-2235
- 2026-10-21330
- 2026-10-22348
Cada ponto é um dia em que lemos um número diferente; os trechos planos são dias em que o número não mudou. Números de marketplaces diferentes nunca são somados.
O que mudou
- Passou a ser um produto que acompanhamos
- Community GitHub marketplaces: apareceu
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
Block destructive git and filesystem commands before execution
-
PreToolUse Bash guard for Claude Code that still holds under --dangerously-skip-permissions. Blocks pipe-to-shell installs, disk wipes and fork bombs; asks before rm -rf…
-
Displays risk level and recovery info before every Bash command execution
-
Auto-allows low-risk bash commands in Claude Code using bash-classify
-
Auto-approve compound Bash commands (pipes, chains, subshells) by parsing each segment via shfmt AST and checking against allow/deny lists
-
Pattern-based PreToolUse-style checks that deny .env reads (Read/Grep/Glob and Bash readers), git force pushes, and recursive rm on /, ~ or $HOME before Claude Code runs them…
-
Safety guardrails for running Claude Code with reduced supervision. The guard-destructive PreToolUse hook matches against a normalized view of each command (heredoc bodies and…
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
Block destructive git and filesystem commands before execution
-
Auto-approve compound Bash commands (pipes, chains, subshells) by parsing each segment via shfmt AST and checking against allow/deny lists
-
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval…
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
-
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.
Listado em Claude Code: claude-plugins-official (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Commands for git commit workflows including commit, push, and PR creation
-
Preset CLI skills for explicit shell, scripting, and CI/CD workflows driven by the `sup` CLI (PyPI package `superset-sup`). Use only for CLI workflows; do not use for MCP-only…
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Listado em Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Bring Qodo's codebase intelligence, coding standards, and code review into your coding agent.
Listado em Codex: openai-curated (openai/plugins) (5)
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
Codex Security workflows for security scans, analysis, and investigation.
-
Inspect recent issues and events in Sentry from Codex.
-
Qodo setup, code intelligence, and review workflows.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
Listado em Community GitHub marketplaces (2)
Listado em Copilot CLI: github/awesome-copilot (5)
-
Reconstruct your dev context (branch, commits, uncommitted work, PR clues) and trigger a resume prompt to continue quickly.
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Use an installed rhost CLI to run ordinary commands on SSH-reachable Linux hosts with local-like stdin, output, and exit behavior.
-
Inspect a repository, improve Tiny Tool Town readiness, submit its listing issue, and launch remediation work.
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Navigate and interact with your C++ code using the Microsoft C++ Language Server.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
-
Complete bundle: all Microsoft Skills for Fabric for developers and consumers.
Listado em Cursor: cursor/plugins (5)
-
Internal team workflows for CI, code review, shipping, local automation, and verification.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
-
Scaffold and validate new agent plugins.
-
Thermo-nuclear branch review: deep security/correctness audits, harsh code-quality rubrics, parallel subagents, thermos orchestration, and optional merge-ready PR flows.
Listado em Docker MCP Catalog (5)
-
Git repository interaction and automation.
-
MCP server for using Semgrep to scan code for security vulnerabilities.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
MCP server for terminal commands, file operations, and process management
-
Tools for interacting with Git repositories.
Listado em Official MCP Registry (5)
-
Read-only context and complete checks against patterns learned from git history. Local; no LLM.
-
speclock io.github.sgroy10/speclock
AI Constraint Engine — enforces CLAUDE.md and .cursorrules as laws. 51 MCP tools.
-
flagrix io.github.flagrix-io/flagrix
Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents
-
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
-
MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.
Listado em npm registry (MCP servers) (5)
-
guardvibe io.github.goklab/guardvibe
Deterministic security layer your AI can't be. 613 rules, 39 tools, CLI + doctor + host audit.
-
Compare dotenv files and report which keys are missing or extra, by name only.
-
Gives AI agents eyes and hands into running React Native apps: logs, REPL, tap, screenshots
-
One workspace for every AI coding assistant. Shared tasks, memory, and governance.
-
Run SQL queries and inspect database schemas through safe, visible MCP tools.
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Community GitHub marketplaces. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.