Claude Code Safety Kit: Plugin Checklist + Guard Plugins

A Claude Code plugin can run shell commands, start servers and add programs Claude can call, the moment you enable it. Marketplaces don't review the code for you.

This kit gives you a repeatable way to check plugins before you install them, and two working guard plugins that stop Claude from touching your secrets.

What's inside
• Plugin Safety Checklist (2-page PDF): what a plugin can contain, what to check before installing, red flags in the code, and team rollout settings.
• Build Your Own Guard Plugin (2-page PDF): how a PreToolUse hook blocks a tool call, and how to make your own plugin in 6 steps.
• env-guard: a ready-to-use plugin that blocks Claude from reading .env files. Comes with 20 tests.
• path-guard: a template guard. Edit one text file to protect SSH keys, cloud credentials or anything else. Comes with 11 tests.
• Bonus: a fillable Tutor Mode prompt template.

Who it's for
Developers who use Claude Code and install plugins, and team leads who decide which plugins their team can use.

Requirements
Claude Code, macOS or Linux (Windows through WSL), and jq.

You get one zip file to download instantly.