Description
Wraps web, MCP and third-party tool output as untrusted data and defangs prompt-injection lines before the model reads them
What it can do
Reach level 1 — reads What does this mean? →
other: $.state.getother: $.state.setreads env varsdraws
Can see: every tool call
Raw API calls (7)
- $.command.register
- $.env.get
- $.session.cwd
- $.state.get
- $.state.set
- $.ui.status
- $.ui.toast
Static check passed on Claude Code 2.1.295.
Install
$/plugin marketplace add ccdwyer/quarantine $/plugin install quarantine Check the repo for the exact name.
Details
- Repository
- ccdwyer/quarantine
- Path in repo
- .
- License
- MIT
- Last updated
- Oct 2, 2026
- First seen
- Oct 10, 2026
- Last scanned
- Oct 10, 2026
Related mods — reach level 1
- ruflo-ruos ★ 76,337
- openviking-memory ★ 39,271
- cc-arcade--davila7 ★ 32,551
- 2048 ★ 32,551
Capability data is machine-generated by static analysis and may be incomplete. A SAFE badge is not a guarantee — read the code before installing anything with broad access. Not affiliated with Anthropic.
Found a mistake in this listing or verdict? Report an issue →