Claudemods

Guardrails

197 mods. Block, rewrite or audit tool calls before they run.

ruflo-intelligence 0.4.2 mod + skill User-facing surface for Ruflo's self-learning system: 6 neural_* + 10 hooks_intelligence_* + 6 routing/meta hooks + 3 hooks_model-* + 4 SONA/MicroLoRA tools (29 total). Implements the 4-step pipeline (RETRIEVE → JUDGE → DISTILL → CONSOLIDATE) and IPFS-based cross-project pattern transfer. ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-neural-trader 0.3.4 mod + skill Neural trading via npx neural-trader — self-learning strategies, Rust/NAPI backtesting, 112+ MCP tools, swarm coordination, and portfolio optimization. As a mod (ADR-445): a tighten-only guard on its tools, /trader-mod, and a status file the console shows ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-observability 0.3.3 mod + skill Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry. As a mod (ADR-445): a tighten-only guard on its tools, /observe-mod, and a status file the console shows ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-business-pods 0.2.3 mod + skill ADR-164 Phase 2 — business-domain pod templates for the federated business autopilot. Ships the sales pod template (templates/sales.json) and a single-tick runner (scripts/pod-tick.mjs) that pre-flights templates via business_pod_validate, reserves budget through a file-based stub ledger (atomic ... ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-bbs-federation 0.3.3 mod + skill AgentBBS cross-host agent federation for ruflo (ADR-164). Phase 1 exposes room coordination — federation_bbs_register / federation_bbs_publish / federation_bbs_watch / federation_bbs_human_join. Phase 2 (v3.40.0) adds signed cross-host federation — federation_bbs_identity (persistent Ed25519 node... ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-security-audit 0.3.3 mod + skill Security review, dependency scanning, policy gates, and CVE monitoring ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-knowledge-graph 0.3.3 mod + skill Knowledge graph construction — entity extraction, relation mapping, and pathfinder graph traversal. As a mod (ADR-445): keeps secrets out of the graph, confirms graph deletes, /kg-mod, and a status file the console shows ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-deepseek-harness 0.2.3 mod + skill DeepSeek model harness for ruflo — agents, commands, scripts, and skills for running and evaluating DeepSeek-backed workflows within the ruflo swarm. ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-graph-intelligence 0.2.0-alpha.4 RuFlo Graph Intelligence Engine — real-time relationship intelligence with complexity-aware execution. Single-entry personalized PageRank, streaming delta updates, witness-signed reasoning artifacts, federation-distributable PR vectors. Built on [email protected]. ruvnet in Guardrails, updated about 14 hours ago 73.9k
ruflo-chatgpt-federation 0.2.3 Dedicated ChatGPT Federation MCP publisher with isolated Nostr signing-key custody, OAuth-scoped publishing, and signed public-channel coordination over the Ruflo relay. As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows. ruvnet in Guardrails, updated about 14 hours ago 73.9k
openviking-memory 0.7.1 mod + skill Long-term semantic memory for Claude Code, powered by OpenViking. Auto-recall relevant memories at session start and capture important information during conversations. OpenViking in Guardrails, updated about 10 hours ago 39.3k
tool-timing-badge 0.2.0 Times every tool call and wraps the engine's ToolUse rendering with a colored duration badge from the surface's own element table, on the terminal, Desktop and mobile. Hooks tool.call and ui.render using JSX. claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
secret-redactor 0.2.0 Redacts API keys, tokens, JWTs, private keys and connection strings from every tool result before the model reads them, notes the redaction through context, and refuses to echo a redacted placeholder back into a Bash command. A tool.call hook in the after placement. claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
webfetch-cache 0.2.0 Short-circuits repeated WebFetch calls for the same URL and prompt within a session, answering { result } from cache without a network round trip. A tool.call hook with TTL and size limits. claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
websearch-to-exa 0.2.0 Overrides the built-in WebSearch tool and routes queries to the Exa search API through $.http.fetch, answering in WebSearch's own result shape, with automatic fallback to the built-in search. A tool.call hook that replaces a core tool. claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
protected-paths-guard 0.2.0 Denies Edit, Write and NotebookEdit calls on sensitive paths (.env files, lockfiles, CI workflows, git internals, private keys) with a glob allowlist override. A tool.call hook with an array matcher. claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
large-edit-confirmation 0.2.0 Asks the user, in the engine's AskUserQuestion dialog ($.ui.ask), before Claude edits or overwrites a file larger than a configurable line count; denies by default when nobody can answer (headless runs). A tool.call hook on Edit and Write using $.fs.read. claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
pi-agent-for-claude 0.1.0 mod + skill pi agent for claude: a `pi` subagent type whose model steps run the pi CLI, so pi subagents and agent-team teammates live in Claude Code's own agent UI, streamed live, on any model pi can reach. Fazal Ali in Guardrails, updated about 11 hours ago 32.4k
npm-to-pnpm-rewriter 0.2.0 Rewrites npm and npx invocations to pnpm (or yarn / bun) before the Bash tool runs them and tells the model what ran through context. A tool.call hook that forwards a modified event (the modifying placement). claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
block-destructive-commands 0.2.0 Denies Bash commands that match destructive patterns (recursive rm on roots, force push, hard reset, destructive SQL, disk formatting) before they run. A tool.call hook with a Bash matcher that returns { deny } without calling next. claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
admin-capability-lockdown 0.2.0 Organization control mod: withholds the http and process nouns from $ so no plugin beneath it can reach the network or spawn processes, refuses user-tier plugins by name allowlist or by the $ calls their source declares, and withholds the Bash tool (shellPolicy "deny", default) or, in "guardrail"... claude-code-templates in Guardrails, updated about 11 hours ago 32.4k
blast-radius 0.1.0 Holds risky shell commands (rm -rf, git reset --hard, git clean, force push, migrations) and shows what they would change, with Proceed and Cancel buttons. Claude Code DevRel in Guardrails, updated 5 days ago 122
agent-state-observer 0.1.0 Observe-only: writes the agent's state (working / idle / awaiting_approval / ended), its transitions and its rate-limit readings to a JSON file. Never blocks, rewrites or delays anything. Marveen in Guardrails, updated about 17 hours ago 114
blast-radius 0.2.2 Holds risky Bash commands and shows what they would change before they run. Hamza Zafar in Guardrails, updated about 23 hours ago 111
genesis-web-override 0.1.0 Answers Claude Code's built-in WebSearch with Genesis's web_search chain, falling back to the built-in on any failure. Needs CLAUDE_CODE_ENABLE_FUNCTION_HOOKS=1. WingedGuardian in Guardrails, updated about 10 hours ago 96
read-counter-example 0.1.0 Teaching example: count successful Read events. Prompt Advisers in Guardrails, updated about 12 hours ago 38
tunnel-telemetry 0.1.0 MIDDLEWARE TUNNEL stage 4: Telemetry: records the call and its result for the ledger ucsandman in Guardrails, updated 4 days ago 28
delegation-drift 0.1.0 Counts main-thread work since the last subagent dispatch, nudges the model to delegate at every tenth call, and refuses foreground poll loops. BioInfo in Guardrails, updated 1 day ago 27
rollback-notice 0.1.0 When a gate denies a Bash call, tells the model the whole call was rolled back and must be re-run in full; refuses git commit -F from shared /tmp. BioInfo in Guardrails, updated 1 day ago 27
force-push-guard 0.1.0 Refuses git push --force before it runs Ken Kousen in Guardrails, updated 4 days ago 19