config-guard

v1.0.0

Who guards the guards: a PreToolUse hook that blocks the agent from tampering with its own guardrail configuration. Deny-by-default protection for settings.json, hook scripts and hooks.json manifests, .mcp.json, plugin manifests, and (at strict level) CLAUDE.md and rules/agents/commands, across Bash, Edit, MultiEdit, and Write, including `claude config/mcp/plugin` CLI writes. Reads always pass; symlinked paths are resolved; creating a protected file counts as mutation (the CVE-2026-25725 vector). Escape hatch via CONFIG_GUARD_ALLOW=true, per-level ask mode via HOOK_ASK_*.

Claude Code

By Karan BansalLicense: MIT533 GitHub starsUpdated 2 weeks ago

Directory evidence

Runtimes: Claude Code
Parsed components: 0 skill or MCP entries
Source updated: Oct 4, 2026
Manifest status: Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install config-guard for Claude Code

Installs for the current user

claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install config-guard@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually

$ git clone https://github.com/karanb192/claude-code-hooks

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/config-guard/.

Plugin files

plugins/config-guard/

└── .claude-plugin/plugin.json

Plugin manifests1

plugins/config-guard/.claude-plugin/plugin.json

{
  "name": "config-guard",
  "description": "Who guards the guards: a PreToolUse hook that blocks the agent from tampering with its own guardrail configuration. Deny-by-default protection for settings.json, hook scripts and hooks.json manifests, .mcp.json, plugin manifests, and (at strict level) CLAUDE.md and rules/agents/commands, across Bash, Edit, MultiEdit, and Write, including `claude config/mcp/plugin` CLI writes. Reads always pass; symlinked paths are resolved; creating a protected file counts as mutation (the CVE-2026-25725 vector). Escape hatch via CONFIG_GUARD_ALLOW=true, per-level ask mode via HOOK_ASK_*.",
  "version": "1.0.0",
  "author": {
    "name": "Karan Bansal",
    "url": "https://github.com/karanb192"
  },
  "homepage": "https://github.com/karanb192/claude-code-hooks",
  "license": "MIT",
  "keywords": [
    "claude-code",
    "hooks",
    "security",
    "guardrails",
    "config",
    "supply-chain",
    "pretooluse"
  ]
}