Description
Tool-call guard rules (parser-based), written in CEL; add your own in ~/.claude/bash-guardrails.json or .claude/bash-guardrails.json. On by default: blocks malformed bash and find rooted at /. Opt-in: Monitor, find without -xdev, pgrep/pkill pitfalls, until-grep loops, sudo, run0 confirmation, and pointing cat/head/sed/awk, heredoc writes, sed -i and Python rewrites to the Read, Write and Edit tools
What it can do
Reach level 1 — reads What does this mean? →
Can see: Monitor|Bash calls
Raw API calls (7)
- $.env.get
- $.fs.read
- $.fs.stat
- $.session.root
- $.ui.ask
- $.ui.log
- $.ui.toast
Static check passed with warnings on Claude Code 2.1.295.
Install
$/plugin marketplace add ruihe774/cc-bash-guardrails $/plugin install bash-guardrails Check the repo for the exact name.
Details
- Repository
- ruihe774/cc-bash-guardrails
- Path in repo
- .
- License
- Unlicense
- Last updated
- Oct 9, 2026
- First seen
- Oct 10, 2026
- Last scanned
- Oct 10, 2026
Related mods — reach level 1
- ruflo-ruos ★ 76,337
- openviking-memory ★ 39,271
- cc-arcade--davila7 ★ 32,551
- 2048 ★ 32,551
Capability data is machine-generated by static analysis and may be incomplete. A SAFE badge is not a guarantee — read the code before installing anything with broad access. Not affiliated with Anthropic.
Found a mistake in this listing or verdict? Report an issue →