Cocabadger Saferun Guard
- 4 repo stars
- Updated July 2, 2026
- Cocabadger/saferun-guard
cocabadger-saferun-guard is a Claude Code plugin that blocks dangerous commands and protects sensitive files before they execute.
About
cocabadger-saferun-guard is a Claude Code security plugin that acts as a runtime firewall between what the agent wants to run and what actually executes on your machine. developers and small teams often grant agents shell access for speed, which makes one bad rm, curl pipe to bash, or dotfile scrape catastrophic. This bundle centers on blocking dangerous commands and shielding sensitive paths before execution, using guard and hook vocabulary consistent with saferun-style safety tooling. It is not a full SAST suite or dependency auditor; it is an execution-time gate you register once and rely on whenever Claude proposes terminal or file operations. If you operate repos that touch API keys, customer data, or homelab infrastructure, the value is predictable denial rather than post-hoc cleanup. Pair it with normal code review habits; it reduces accidental self-inflicted damage from autonomous loops.
- Runtime safety firewall for Claude Code command execution
- Blocks dangerous commands before they run
- Protects sensitive files from agent-driven access or edits
- Hook-oriented guardrails aligned with saferun and security keywords
- Single focused plugin (1-plugin bundle) for minimal attack surface in your stack
Cocabadger Saferun Guard by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
/plugin install cocabadger-saferun-guard@Cocabadger/saferun-guardAdd your badge
Show developers this plugin is listed on Skillselion. Paste this into your README.
| repo stars | ★ 4 |
|---|---|
| Last updated | July 2, 2026 |
| Repository | Cocabadger/saferun-guard ↗ |
What it does
Add a runtime guard that stops dangerous Claude Code commands and sensitive file access before execution.
Who is it for?
Best when you let Claude Code run terminal commands locally and want a lightweight pre-execution safety net.
Skip if: Projects that only use read-only chat with no tool execution, or teams that already enforce equivalent enterprise policy gateways.
What you get
After registration, risky commands and sensitive file operations can be stopped at runtime instead of repaired after damage.
- Pre-execution checks on agent-proposed commands
- Sensitive file access protection during agent sessions
- A single-plugin saferun-style safety layer in your Claude setup
By the numbers
- Bundle contains 1 plugin per catalog metadata
- Repository: Cocabadger/saferun-guard
- Described as runtime safety firewall with before-execute blocking semantics
Recommended Plugins
1mangesh1 Hipaa GuardianAI agent skill for HIPAA compliance - PHI/PII detection, code scanning, audit reports, and remediation guidance6
Abossenbroek Abossenbroek Claude PluginsCustom Claude Code plugins by abossenbroek2
Agentsecops SecopsagentkitSecurity operations toolkit for AI coding agents.181
Agent Sh EnhancePlugin structure and tool use analyzer - validates plugin.json, MCP tools, and security patterns3
Altic Dev EnvaultLet agents safely manage env variables6
Auth0 Agent SkillsAuth0 Agent Skills40How it compares
Runtime execution firewall plugin, not a vulnerability scanner or static code-review skill.
FAQ
Who is Cocabadger Saferun Guard for?
It is for Claude Code users who execute agent-suggested commands on real machines and want guardrails before those commands run.
When should I use Cocabadger Saferun Guard?
Use it whenever the agent has shell or file tools enabled, especially on repos with credentials, customer data, or irreplaceable local environments.
How do I add Cocabadger Saferun Guard to my agent?
Install the Cocabadger/saferun-guard Claude Code plugin from its repository and enable its hooks or guard module per the plugin README so checks run before execution.