railguard
Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code. Instead of choosing between approving every command manually or giving Claude…
Pacote de plugins · de railyard-dev
Resumo
railguard é um pacote de plugins para ferramentas de programação com IA publicado por railyard-dev. Marketplaces que lemos e que o listam: 1 (Claude Code: claude-plugins-community). Vimos pela primeira vez em 2026-10-11 e não registramos mudanças desde então. Conforme nossa passagem pelos marketplaces em 2026-10-12.
Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code. Instead of choosing between approving every command manually or giving Claude unrestricted access, Railguard sits in the middle. It intercepts every tool call — Bash, Write, Edit, Read — and makes policy-based decisions: allow safe commands instantly, block dangerous ones automatically, and ask for human approval when it's not sure. Out of the box, Railguard comes with 29 default rules covering destructive operations like terraform destroy, rm -rf, DROP TABLE, and git force-push. It detects evasion attempts (base64 encoding, chr construction, variable substitution, shell wrapping), restricts file access with path fencing (blocking ~/.ssh, ~/.aws, /etc), snapshots every file write for one-click rollback, and logs every decision to a structured audit trail. Everything is customizable through a simple railguard.yaml file in your project directory.
O que pede
- Instala-se como pacote de plugins
- Hooks declarados: 3
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Funciona com
- Claude Code
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Sem dados para um comando automático: o que os marketplaces declaram não diz de forma inequívoca como conectá-lo.
Onde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Claude Code: claude-plugins-community (Abrir o código no GitHub) | Listado | 0.5.1 | Forks (GitHub): 5 Estrelas (GitHub): 39 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
O que o pacote contém
Conforme publicado em Claude Code: claude-plugins-community.
Hooks: 3
PostToolUsePreToolUseSessionStart
O que mudou
Nada mudou neste plugin desde que começamos a acompanhá-lo.
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration…
-
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval…
-
Production protection layer for Claude Code. Hard-blocks destructive operations (force push, DROP TABLE, TRUNCATE, Terraform state edits). P1/P2/P3 incident SLAs with escalation…
-
Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OAP) policy before execution. Blocks…
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
-
Intent-based security enforcement for Claude Code. ArmorClaude makes Claude declare what it intends to do before doing it, then checks every tool call against that plan. Adds…
-
Security hardening and production-grade error handling expertise for Claude Code. Prevents OWASP Top 10 vulnerabilities (SQL injection, XSS, broken auth, secrets exposure) and…
-
7 hooks for Claude Code covering safety, context injection, auto-formatting, model routing, and session lifecycle -- built from 6 months of daily use.
-
Enterprise guardrails, delivery lifecycle, and self-evolution for Claude Code. Wraps every session in 7 security layers (path validation, command validation, injection scanning…
-
Frictionless security, compliance, and threat detection for Claude Code and Co-Work. Advanced Behavioral detection patterns catch credential exfiltration, reverse shells, prompt…
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration…
-
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval…
-
Production protection layer for Claude Code. Hard-blocks destructive operations (force push, DROP TABLE, TRUNCATE, Terraform state edits). P1/P2/P3 incident SLAs with escalation…
-
Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OAP) policy before execution. Blocks…
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
Listado em Claude Code: claude-plugins-official (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Listado em Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
gk-cli com.gitkraken/gk-cli
The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
-
MCP server for terminal commands, file operations, and process management
Listado em Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
Listado em Community GitHub marketplaces (5)
-
Blocks Claude Code from writing or committing leaked secrets.
-
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
-
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
-
Endor Labs workflow agents and setup for Claude Code.
-
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…
Listado em Copilot CLI: github/awesome-copilot (5)
-
Plain-English translation layer for non-technical Copilot CLI users. Translates every approval prompt, error message, and technical output into clear, jargon-free English with…
-
Use an installed rhost CLI to run ordinary commands on SSH-reachable Linux hosts with local-like stdin, output, and exit behavior.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Connect GitHub Copilot to your CockroachDB clusters: run and explore SQL through MCP, with DBA/Developer/Operator agents, CockroachDB best-practice skills, and safety hooks that…
-
Model, visualize, and deploy applications with Radius from the GitHub Copilot app and CLI.
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Complete bundle: all Microsoft Skills for Fabric for developers and consumers.
-
model-apps
Build and deploy Power Apps generative pages for model-driven apps with specialist agents for planning, entity creation, and parallel code generation. Requires PAC CLI >= 2.7.0…
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
Listado em Cursor: cursor/plugins (5)
-
Patterns for designing CLIs that coding agents can run reliably: flags, help with examples, pipelines, errors, idempotency, dry-run.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Fan large tasks out across parallel cloud agents with planners, workers, verifiers, and structured handoffs.
-
Scaffold and validate new agent plugins.
-
Build apps, scripts, and automations with the TypeScript SDK.
Listado em Docker MCP Catalog (5)
-
Giving Claude ability to run code with E2B via MCP (Model Context Protocol).
-
MCP server for terminal commands, file operations, and process management
-
Bridges multiple AI models and CLIs, enabling orchestrated workflows across Claude Code, Gemini CLI, Codex CLI, and other AI development tools.
-
Manage Zscaler Zero Trust Exchange via 400+ tools — ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, EASM, and more.
-
A universal MCP (Model Context Protocol) server to integrate any API with Claude Desktop using only Docker configurations.
Listado em Official MCP Registry (5)
-
guard io.github.codapult/guard
Local-first architecture guardrails and project context for JS/TS AI coding agents.
-
guardvibe io.github.goklab/guardvibe
Deterministic security layer your AI can't be. 579 rules, 39 tools, CLI + doctor + host audit.
-
agent-guardrail io.github.rudimentall1/agent-guardrail
Deterministic policy firewall for AI agent tool calls - YAML rules, not a fuzzy risk score.
-
Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.
-
Merge gates and safety checks for AI coding agents via MCP.
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Este plugin é seu?
Adicione-o aos seus projetos e prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS. Você recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Claude Code: claude-plugins-community. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.