config-watch

v1.0.0

Tripwire for out-of-band config changes in Claude Code. A ConfigChange hook fires whenever settings (user, project, local, policy) or skills change mid-session, from an installer script, an npm postinstall payload, or any other process rewriting settings while a session runs, and makes the change loudly visible via systemMessage. Opt into CONFIG_WATCH_BLOCK=true to stop the change from taking effect (exit 2); policy_settings cannot be blocked by hooks, so those still warn. Pairs with config-guard, which blocks the agent's own writes.

Claude Code

By Karan BansalLicense: MIT533 GitHub starsUpdated 2 weeks ago

Directory evidence

Runtimes: Claude Code
Parsed components: 0 skill or MCP entries
Source updated: Oct 4, 2026
Manifest status: Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install config-watch for Claude Code

Installs for the current user

claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install config-watch@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually

$ git clone https://github.com/karanb192/claude-code-hooks

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/config-watch/.

Plugin files

plugins/config-watch/

└── .claude-plugin/plugin.json

Plugin manifests1

plugins/config-watch/.claude-plugin/plugin.json

{
  "name": "config-watch",
  "description": "Tripwire for out-of-band config changes in Claude Code. A ConfigChange hook fires whenever settings (user, project, local, policy) or skills change mid-session, from an installer script, an npm postinstall payload, or any other process rewriting settings while a session runs, and makes the change loudly visible via systemMessage. Opt into CONFIG_WATCH_BLOCK=true to stop the change from taking effect (exit 2); policy_settings cannot be blocked by hooks, so those still warn. Pairs with config-guard, which blocks the agent's own writes.",
  "version": "1.0.0",
  "author": {
    "name": "Karan Bansal",
    "url": "https://github.com/karanb192"
  },
  "homepage": "https://github.com/karanb192/claude-code-hooks",
  "license": "MIT",
  "keywords": [
    "claude-code",
    "hooks",
    "security",
    "config",
    "supply-chain",
    "configchange"
  ]
}