guard
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval…
Пакет плагинов · от TracineHQ
Коротко
guard: пакет плагинов для ИИ-инструментов разработки, издатель TracineHQ. Витрин, которые мы читаем и где он опубликован: 1 (Claude Code: claude-plugins-community). Мы впервые увидели его 2026-10-11 и с тех пор изменений не фиксировали. Данные нашего прохода по витринам на 2026-10-12.
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval, pipe-to-shell, live credentials (`gh auth token`, `aws sts get-session-token`, `op read`), `git -c core.hooksPath=…` injection, silent commit reuse (`git commit -C HEAD~1`, `--reuse-message`). Each deny names the rule and prints a one-line override (`guard allowlist allow-command …`); decisions stream to a JSONL log the optional CLI reads (`pipx install tracine-guard`, then `guard noisy --since 24h` or `guard trace <session>`). Apache-2.0, no third-party deps. Defense in depth alongside Claude Code's own permissions — especially valuable for autonomous agent windows where no human is present to answer an ASK, so denies act as a hard floor. Not a sandbox or exfiltration boundary; see SECURITY.md.
Что просит
- Ставится как пакет плагинов
- Хуков: 8
Что объявляет, просит и запускает, полностью
Устанавливайте плагины только от разработчиков, которым доверяете. Мы показываем то, что публикуют витрины, и не проверяем плагины.
Подключить
Нет данных для автоматической команды: из того, что объявляют витрины, нельзя однозначно понять, как его подключить.
Посмотреть карточку на Claude Code: claude-plugins-community
Где опубликован
| Витрина | Статус | Версия | Числа | Проверен | Впервые замечен |
|---|---|---|---|---|---|
| Claude Code: claude-plugins-community (Открыть исходники на GitHub) | Опубликован | 1.5.0 | Форки (GitHub): 0 Звёзды (GitHub): 0 |
Не помечен |
Каждое число принадлежит своей витрине и никогда не складывается с числами других витрин. Если витрина число не публикует, мы его не показываем: нет числа не значит ноль.
Что входит в пакет
Так опубликовано на витрине Claude Code: claude-plugins-community.
Команды: 6
diffnoisysilentstatustesttrace
Хуки: 2
PermissionRequestPreToolUse
Что менялось
С тех пор как мы следим за плагином, ничего не менялось.
Похожие плагины
Продукты, чьи собственные названия, описания, инструменты и скиллы ближе всего по смыслу к этому, на всех витринах, которые мы читаем. Близость упорядочена только внутри этого списка.
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration…
-
Blocks Claude Code from writing or committing leaked secrets.
-
A pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval usage, Function constructor abuse, hardcoded…
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
-
Block destructive git and filesystem commands before execution
-
Production protection layer for Claude Code. Hard-blocks destructive operations (force push, DROP TABLE, TRUNCATE, Terraform state edits). P1/P2/P3 incident SLAs with escalation…
-
Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code. Instead of choosing between approving every command manually or giving Claude…
-
Frictionless security, compliance, and threat detection for Claude Code and Co-Work. Advanced Behavioral detection patterns catch credential exfiltration, reverse shells, prompt…
-
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using…
Похожие плагины по витринам
Тот же вопрос к каждой витрине по отдельности: есть ли там аналог этого плагина?
Есть на витрине Claude Code: claude-plugins-community (5)
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration…
-
A pre-tool-use hook plugin that automatically scans code for security vulnerabilities before Claude writes it to disk. Detects eval usage, Function constructor abuse, hardcoded…
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
-
Block destructive git and filesystem commands before execution
-
Production protection layer for Claude Code. Hard-blocks destructive operations (force push, DROP TABLE, TRUNCATE, Terraform state edits). P1/P2/P3 incident SLAs with escalation…
Есть на витрине Claude Code: claude-plugins-official (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the…
Есть на витрине Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
gk-cli com.gitkraken/gk-cli
The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
-
MCP server for terminal commands, file operations, and process management
Есть на витрине Codex: openai-curated (openai/plugins) (5)
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
Есть на витрине Community GitHub marketplaces (5)
-
Blocks Claude Code from writing or committing leaked secrets.
-
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
-
Sourcery security findings for AI coding agents: triage and minimal-change remediation via the public Sourcery API (12 MCP tools + skills).
-
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…
-
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
Есть на витрине Copilot CLI: github/awesome-copilot (5)
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Plain-English translation layer for non-technical Copilot CLI users. Translates every approval prompt, error message, and technical output into clear, jargon-free English with…
-
Use an installed rhost CLI to run ordinary commands on SSH-reachable Linux hosts with local-like stdin, output, and exit behavior.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
Есть на витрине Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Complete bundle: all Microsoft Skills for Fabric for developers and consumers.
-
Navigate and interact with your C++ code using the Microsoft C++ Language Server.
Есть на витрине Cursor: cursor/plugins (5)
-
Patterns for designing CLIs that coding agents can run reliably: flags, help with examples, pipelines, errors, idempotency, dry-run.
-
Scaffold and validate new agent plugins.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Internal team workflows for CI, code review, shipping, local automation, and verification.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Есть на витрине Docker MCP Catalog (5)
-
MCP server for terminal commands, file operations, and process management
-
Giving Claude ability to run code with E2B via MCP (Model Context Protocol).
-
Bridges multiple AI models and CLIs, enabling orchestrated workflows across Claude Code, Gemini CLI, Codex CLI, and other AI development tools.
-
MCP server for using Semgrep to scan code for security vulnerabilities.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
Есть на витрине Official MCP Registry (5)
-
GuardianShield io.github.sparkvibe-io/GuardianShield
AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
-
securecode io.github.juanisidoro/securecode
Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
-
ai-code-scanner io.github.4hmetuyar/ai-code-scanner
Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection
-
Tripwire Guard — evidence-first injection scanner
Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.
-
Merge gates and safety checks for AI coding agents via MCP.
Найдено по смыслу, а не по общему коду или репозиторию: похожие плагины остаются разными продуктами, и это не обзор и не рекомендация.
Это ваш плагин?
Докажите, что поддерживаете плагин: файлом в его репозитории, файлом на вашем домене или DNS-записью. Вы будете получать уведомления, когда витрина добавит плагин, снимет его, изменит отметку verified или список того, что он просит, и сможете поставить его удалённый endpoint на мониторинг как веб-сервис.
Данные витрины Claude Code: claude-plugins-community. Числа взяты из наших регулярных обходов витрин, последняя проверка . Контакты издателей плагинов мы не публикуем.