70 mods for Claude Code security tools, ordered by the votes people give them on ClaudeMods. A good place to start: sec-default,ruflo-market-data or ruflo-migrations.
Each entry links to its original repository or post, and shows how to install it.
70
Asks you before any package install (npm, pnpm, pip, uv, npx, winget and more) and shows a registry link for each package.
A Claude Code mod that vets packages before they install.
A Claude Code plugin that hooks Bash tool calls to block destructive commands, such as those that truncate output, detach processes, or mass-kill by name.
Keeps secrets out of transcripts: blocks shell reads of secret files, hides token values in tool output, and checks git add and push.
A Claude Code plugin that refuses or rewrites tool calls according to policy and, when observation is enabled, records hook events as database rows per lineage.
A Claude Code mod that opens a side pane explaining each permission request in plain English with WHAT, WHY and RISK before you approve.
Track what your AI coding tools cost
syrtis.nyanako.comVisit sponsor ↗
A Claude Code plugin hook that prompts the user in a dialog before a push, deploy, or publish is executed, gating the publish guard in every permission mode.
Shadow or enforce the existing Harness PreToolUse guards as function hooks
A Claude Code mod that blocks Claude from running scripts piped straight from the internet, including download-and-execute pipes, encoded PowerShell, and LOLBin downloaders, allowing safe patterns like curl -o and git clone.
