ccguard
soyukke v0.5.0
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration, and supply chain att...
From the developer
License
MIT
Works with
Claude Code
Description
From the marketplace listing
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration, and supply chain attacks. Zero external dependencies, written in Zig. Supports three decision levels: allow, deny (hard block), and ask (user confirmation prompt). Protects against reverse shells, pipe-to-interpreter execution, credential leakage, cloud metadata access, environment variable injection, and more.
What changed
No changes recorded yet. Follow this plugin to keep track of future changes.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prom...
Shared terms: hook, pattern, security, mcp
-
Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OA...
Shared terms: against, block, call, evaluate
-
Frictionless security, compliance, and threat detection for Claude Code and Co-Work. Advanced Behavioral detection patterns catch credent...
Shared terms: pattern, security, code, attack
-
Self-improving memory for Claude Code. Observes hooks (tool use, edits, errors, guard blocks), distills recurring patterns into durable r...
Shared terms: block, edit, guard, rule
-
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-clo...
Shared terms: block, matching, read, pattern
Keywords
Files & skills
ccguard · catalog manifest
Saved declaration
{}
ccguard · catalog manifest
Saved declaration
{
"name": "ccguard",
"source": {
"sha": "e093ef5b805325732829de04201a9eab4a50abb5",
"url": "https://github.com/soyukke/ccguard.git",
"source": "url"
},
"homepage": "https://github.com/soyukke/ccguard",
"description": "Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block dangerous commands, data exfiltration, and supply chain attacks. Zero external dependencies, written in Zig. Supports three decision levels: allow, deny (hard block), and ask (user confirmation prompt). Protects against reverse shells, pipe-to-interpreter execution, credential leakage, cloud metadata access, environment variable injection, and more."
}
ccguard · catalog manifest
Saved declaration
{
"name": "ccguard",
"author": {
"url": "https://github.com/soyukke",
"name": "soyukke"
},
"license": "MIT",
"version": "0.5.0",
"homepage": "https://github.com/soyukke/ccguard",
"keywords": [
"security",
"guard",
"hook",
"pretooluse",
"shell",
"defense"
],
"repository": "https://github.com/soyukke/ccguard",
"description": "Security guard for Claude Code — blocks dangerous commands with shell-aware pattern matching (864 tests, zero dependencies)"
}
plugin.json observed Nov 6, 2026 · 10:41 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
Installation instructions
Community
/plugin marketplace add anthropics/claude-plugins-community
/plugin install ccguard@claude-communityTechnical details
- Sources
- Community
- First seen
- Oct 3, 2026 · 22:13 UTC
- Last seen
- Nov 7, 2026 · 06:00 UTC
- Latest observed change
- Oct 3, 2026 · 22:13 UTC
- Collection status
- Listed
- Reported installs
- Not provided
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.