claude-security-guard

claude plugins install nardovibecoding/claude-security-guard

---

<div align="center">

The most complete enforcement + security layer for Claude Code — hooks that block, tools that know, skills that audit.

[](hooks/) [](mcp/) [](commands/) [](LICENSE) [](#)

</div>

---

claude-security-guard runs a multilayer defense stack directly inside Claude Code:

• Prompt injection detection — 30+ patterns across English, Chinese, and Japanese
• SSRF protection — blocks private IP ranges, suspicious TLDs, and homograph attacks
• Secret leak scanning — finds API keys, tokens, passwords, and private keys before they leave your machine
• File upload safety — MIME mismatch detection, double-extension attacks, ClamAV integration
• Dependency auditing — typosquatting detection against known malicious package names
• Exfiltration detection — flags POST requests to unknown domains and file-to-HTTP patterns

Every security check runs as a hook (zero tokens) or an MCP tool call (one tool call). No instructions burned in context.

---

User / Claude Code
       │
       ▼
┌──────────────────────────────────────────────────────┐
│  HOOKS — the muscle                                  │
│  Fires on every tool event. Silent. Zero tokens.     │
│  Blocks bad ops before they execute.                 │
│  Triggers side-effects (sync, restart, remind).      │
│  14 hooks across PreToolUse / PostTool