railguard
railguard-dev v0.5.1
Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code. Instead of choosing between approving every command manually or giving Claude unrestricted access...
From the developer
License
MIT
Works with
Claude Code
Description
From the marketplace listing
Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code. Instead of choosing between approving every command manually or giving Claude unrestricted access, Railguard sits in the middle. It intercepts every tool call — Bash, Write, Edit, Read — and makes policy-based decisions: allow safe commands instantly, block dangerous ones automatically, and ask for human approval when it's not sure. Out of the box, Railguard comes with 29 default rules covering destructive operations like terraform destroy, rm -rf, DROP TABLE, and git force-push. It detects evasion attempts (base64 encoding, chr() construction, variable substitution, shell wrapping), restricts file access with path fencing (blocking ~/.ssh, ~/.aws, /etc), snapshots every file write for one-click rollback, and logs every decision to a structured audit trail. Everything is customizable through a simple railguard.yaml file in your project directory.
What changed
No changes recorded yet. Follow this plugin to keep track of future changes.
Similar plugins
Find competitors to follow as you develop your plugin.
-
nah is a local safety guard for Claude Code. It runs before tool use and classifies actions by what they actually do, so safe operations ...
Shared terms: code, bash, call, dangerous
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block...
Shared terms: code, bash, block, call
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execu...
Shared terms: command, code, block, dangerous
-
Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OA...
Shared terms: code, block, call, dangerous
-
Membase connects Claude Code to Membase Cloud, giving Claude persistent memory and wiki workflows across coding sessions. It can recall r...
Shared terms: giving, context, code, aware
Keywords
Files & skills
railguard · catalog manifest
Saved declaration
{}
railguard · catalog manifest
Saved declaration
{
"name": "railguard",
"source": {
"sha": "41eb9272f62eafd6fe968f381807154a16b0c71c",
"url": "https://github.com/railyard-dev/railguard.git",
"source": "url"
},
"homepage": "https://railguard.tech",
"description": "Railguard is a safer, context-aware alternative to --dangerously-skip-permissions for Claude Code.\n\nInstead of choosing between approving every command manually or giving Claude unrestricted access, Railguard sits in the middle. It intercepts every tool call — Bash, Write, Edit, Read — and makes policy-based decisions: allow safe commands instantly, block dangerous ones automatically, and ask for human approval when it's not sure.\n\nOut of the box, Railguard comes with 29 default rules covering destructive operations like terraform destroy, rm -rf, DROP TABLE, and git force-push. It detects evasion attempts (base64 encoding, chr() construction, variable substitution, shell wrapping), restricts file access with path fencing (blocking ~/.ssh, ~/.aws, /etc), snapshots every file write for one-click rollback, and logs every decision to a structured audit trail.\n\nEverything is customizable through a simple railguard.yaml file in your project directory."
}
railguard · catalog manifest
Saved declaration
{
"name": "railguard",
"author": {
"name": "railguard-dev"
},
"license": "MIT",
"version": "0.5.1",
"homepage": "https://github.com/railguard-dev/railguard",
"keywords": [
"security",
"guardrails",
"safety",
"runtime",
"hooks"
],
"repository": "https://github.com/railguard-dev/railguard",
"description": "A secure runtime for Claude Code. Intercepts every tool call with policy-based allow/block/ask decisions, evasion detection, path fencing, file snapshots, and audit logging."
}
plugin.json observed Nov 6, 2026 · 10:48 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
Installation instructions
Community
/plugin marketplace add anthropics/claude-plugins-community
/plugin install railguard@claude-communityTechnical details
- Sources
- Community
- First seen
- Oct 3, 2026 · 22:13 UTC
- Last seen
- Nov 7, 2026 · 00:08 UTC
- Latest observed change
- Oct 3, 2026 · 22:13 UTC
- Collection status
- Listed
- Reported installs
- Not provided
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.