security

A Claude Code mod that blocks Claude from running scripts piped straight from the internet, including download-and-execute pipes, encoded PowerShell, and LOLBin downloaders, allowing safe patterns like curl -o and git clone.

The useful detail in this Claude Code mods catalogue is the permission map: for each mod, it records what it can read, write, run, or send over the network. That’s the kind of context you want before installing a hook. https://t.co/B7yVuK0rrQ

Before `git push` and publishing via `gh` (in Bash and PowerShell), it checks the commits that are going to be pushed for keys, tokens, and passwords. It blocks the push if any are found. One-off bypass with `VARREDURA_OK=1`.

A Claude Code mod that makes Claude ask before it touches your database migrations.