Safety Pack
- Updated July 30, 2026
- s-hiraoku/claude-harnesses
safety-pack provides deterministic PreToolUse guards covering secret detection, dangerous-command blocking, branch protection, prompt-injection defense and MCP allowlisting. Developers use it to keep an agent from leaking secrets or running destructive or malicious actions.
Key points
- Secret detection
- Dangerous-command and branch guards
- Prompt-injection and MCP allowlisting
Safety Pack by the numbers
- Data as of Jul 31, 2026 (Skillselion catalog sync)
/plugin marketplace add s-hiraoku/claude-harnesses/plugin install safety-pack@claude-harnessesAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Last updated | July 30, 2026 |
|---|---|
| Repository | s-hiraoku/claude-harnesses ↗ |
What it does
Deterministic PreToolUse guards: secret detection, dangerous-command blocking, branch protection, prompt-injection defense and MCP allowlisting.
README.md
safety-pack
Deterministic PreToolUse guards for safe autonomous operation.
Components
| Hook | Event | What it blocks |
|---|---|---|
secret-guard |
PreToolUse Bash/Edit/Write/MultiEdit | OpenAI/GitHub/AWS keys, private-key blocks, .env secret assignments |
dangerous-command-guard |
PreToolUse Bash | rm -rf /, git reset --hard, force push, chmod -R 777, dd of=/dev/sd*, curl | sh |
branch-protection-guard |
PreToolUse Bash | direct push/commit to main/master/production/release |
prompt-injection-detector |
PreToolUse WebFetch/WebSearch/Read | naive jailbreak prefixes in fetched content |
mcp-tool-allowlist |
PreToolUse mcp__*__* | MCP tool calls outside CLAUDE_HARNESSES_MCP_ALLOW |
All hooks honor CLAUDE_HARNESSES_DISABLE=1 as a global kill switch and exit with code 2 to deny matching tool calls.
Install
claude /plugin install safety-pack@claude-harnesses
Per-hook overrides
| Env var | Effect |
|---|---|
CLAUDE_HARNESSES_DISABLE=1 |
Disable all guard hooks. |
CLAUDE_HARNESSES_ALLOW_MAIN=1 |
Allow direct push/commit to a protected branch for one session. |
CLAUDE_HARNESSES_MCP_ALLOW="mcp__github__*,mcp__playwright__*" |
Comma-separated allowlist of MCP tool patterns. |
Limits
These hooks are heuristics. They reduce common foot-guns; they do not replace permissions, sandboxing, code review, and CI.
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85