yash-gadodia@yash-gadodia
Track the scope of file edits using configurable thresholds, with model judgment and user overrides.
scope-guard
Stars 3Permission footprint L32 with this name
Best Claude Code security tools
70 mods for Claude Code security tools, ordered by the votes people give them on ClaudeMods. A good place to start: sec-default,ruflo-market-data or ruflo-migrations.
Each entry links to its original repository or post, and shows how to install it.
70Sponsors
Want yours up here? ↗
homieyangg@homieyangg
A Claude Code hook plugin that masks token-like strings in tool output before the model sees them.
secret-mask
Stars 2Permission footprint L23 with this name
baselane-sh@baselane-sh
A Baselane Claude Code guard mod that asks before a downloaded script is piped into a shell or interpreter, such as curl | sh, wget -O- | bash, or bash <(curl ...).
claude / curl-pipe-guard
❯ /curl-pipe-guard▰▰▰▰▰▰▰▰ Security & privacy
✳︎ curl-pipe-guard
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ curl-pipe-guard
└─ Make every conversation easier
curl-pipe-guard
Stars 1Permission footprint L2
Sponsored content
BazaarLink
One key for 140+ AI models
bazaarlink.aiVisit sponsor ↗
schreibse@schreibse
Secrets found by betterleaks reach the model as ‹secret:…› tokens; Write/Edit restore them, other tools refuse them
claude / redact
❯ /redact▰▰▰▰▰▰▰▰ Security & privacy
✳︎ redact
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ redact
└─ Make every conversation easier
redact
Stars 3Permission footprint L22 with this name
Sponsored content
Syrtis
Track what your AI coding tools cost
syrtis.nyanako.comVisit sponsor ↗
KTCrisis@KTCrisis
Live mesh7 decisions, pending approvals and emergency stops in a pane
claude / mesh7-pane
❯ /mesh7-pane▰▰▰▰▰▰▰▰ Security & privacy
✳︎ mesh7-pane
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ mesh7-pane
└─ Make every conversation easier
mesh7-pane
Stars 1Permission footprint L3
ShriD5@ShriD5
A Claude Code plugin with a tool.call hook that blocks Write, Edit, MultiEdit, NotebookEdit and Bash redirections from putting real-looking credentials (AWS, Anthropic, OpenAI, GitHub, Slack, Stripe, Google keys, private keys, DB URLs with passwords) into files, while allowing placeholders, dev defaults and .env files.
claude / secret-guard
❯ /secret-guard▰▰▰▰▰▰▰▰ Security & privacy
✳︎ secret-guard
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ secret-guard
└─ Make every conversation easier
secret-guard
Stars 1Permission footprint L23 with this name
theonly1me@theonly1me
A Claude Code plugin that detects when Claude edits or deletes files outside your request. Clear drift pauses on a question dialog; milder drift is flagged above the prompt with pull-back, fine, and allow-folder keys.
scope-guard
Stars 2Permission footprint L22 with this name
timarnoldev@timarnoldev
Put API keys and other secrets into any config file without them appearing in chat, shell history or tool output.
claude / credential-paster
❯ /credential-paster▰▰▰▰▰▰▰▰ Security & privacy
✳︎ credential-paster
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ credential-paster
└─ Make every conversation easier
credential-paster
Stars 2Permission footprint L2
baselane-sh@baselane-sh
A Baselane Claude Code guard that asks before a command prints environment variables, echoes a sensitive variable, or sends local data to a remote host.
claude / env-exfil-guard
❯ /env-exfil-guard▰▰▰▰▰▰▰▰ Security & privacy
✳︎ env-exfil-guard
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ env-exfil-guard
└─ Make every conversation easier
env-exfil-guard
Stars 1Permission footprint L2
MichaelP17@MichaelP17
A Claude Code plugin that intercepts Bash tool calls and forces an explicit user dialog before any command that changes the machine (sudo, brew install, global config writes), even in auto mode, with per-project ask/block rules.
claude / machine-guard
❯ /machine-guard▰▰▰▰▰▰▰▰ Security & privacy
✳︎ machine-guard
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ machine-guard
└─ Make every conversation easier
machine-guard
Stars 2Permission footprint L2
baselane-sh@baselane-sh
Asks before chmod makes files world-writable (777, a+w, o+w) or chmod or chown runs recursively on a broad path (/, a system folder, a home folder).
claude / chmod-guard
❯ /chmod-guard▰▰▰▰▰▰▰▰ Security & privacy
✳︎ chmod-guard
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ chmod-guard
└─ Make every conversation easier
chmod-guard
Stars 1Permission footprint L2
ShriD5@ShriD5
A Claude Code plugin that, between configurable late-night hours, makes Claude extra cautious: risky Bash commands (deploys, force pushes, rm -rf, DROP/TRUNCATE) are held for confirmation, the system prompt gains a caution section, and a status line shows the active window.
claude / night-mode
❯ /night-mode▰▰▰▰▰▰▰▰ Security & privacy
✳︎ night-mode
└─ Make every conversation easier
Text preview · Not a project screenshot✳︎ night-mode
└─ Make every conversation easier
night-mode
Stars 1Permission footprint L2
Browse by page →Page 3 / 6
- What are the best Claude Code security tools?
- Right now the top ones are sec-default,ruflo-market-data and ruflo-migrations. This page lists 70 Claude Code security tools and changes as new ones are added.
- How is this list ordered?
- Entries with more votes from ClaudeMods visitors come first, so the order changes as people vote.
- How do I add my own Claude Code security tools?
- Use the Submit page on ClaudeMods. Submissions are reviewed, and the approved ones appear on this list.