irreversible-guard

v0.2.2

PreToolUse gate that blocks Bash commands with no practical local undo — de-obfuscates ssh/docker-exec transports, heredocs, command chains, and env prefixes, then matches a tiered deny-set (irreversible-everywhere ops block unconditionally; locally-reversible ops block only when the command names production)

CodexClaude Code

By Andre PaatLicense: MIT0 GitHub starsUpdated last week

Directory evidence

Runtimes: Codex and Claude Code
Parsed components: 0 skill or MCP entries
Source updated: Sep 13, 2026
Manifest status: Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install irreversible-guard for Codex and Claude Code

Installs for the current user

codex plugin marketplace add paat/claude-plugins
codex plugin marketplace upgrade paat-plugins
codex plugin add irreversible-guard@paat-plugins

Paste and run these commands in a terminal with Codex. They add and refresh the paat-plugins catalog, then install this plugin.

Compatibility: the page URL and API slug “irreversible-guard” remain stable.

Codex: irreversible-guard@agent-plugin-marketplace → irreversible-guard@paat-plugins

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually

$ git clone https://github.com/paat/claude-plugins

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/irreversible-guard/.

Plugin files

plugins/irreversible-guard/

├── .codex-plugin/plugin.json
└── .claude-plugin/plugin.json

Plugin manifests2

plugins/irreversible-guard/.codex-plugin/plugin.json

{
  "name": "irreversible-guard",
  "version": "0.2.2",
  "description": "PreToolUse gate that blocks Bash commands with no practical local undo — de-obfuscates ssh/docker-exec transports, heredocs, command chains, and env prefixes, then matches a tiered deny-set (irreversible-everywhere ops block unconditionally; locally-reversible ops block only when the command names production)",
  "author": {
    "name": "Andre Paat"
  },
  "interface": {
    "displayName": "Irreversible Guard",
    "shortDescription": "PreToolUse gate that blocks Bash commands with no practical local undo — de-obfuscates ssh/docker-exec transports, heredocs, command chains, and env prefixes, then matches a tiered deny-set (irreversible-everywhere ops block unconditionally; locally-reversible ops block only when the command names production)",
    "longDescription": "PreToolUse gate that blocks Bash commands with no practical local undo — de-obfuscates ssh/docker-exec transports, heredocs, command chains, and env prefixes, then matches a tiered deny-set (irreversible-everywhere ops block unconditionally; locally-reversible ops block only when the command names production)",
    "developerName": "Andre Paat",
    "category": "Security",
    "capabilities": [
      "Lifecycle Hooks"
    ],
    "defaultPrompt": "Use the irreversible-guard plugin for this task.",
    "websiteURL": "https://github.com/paat/claude-plugins"
  },
  "homepage": "https://github.com/paat/claude-plugins",
  "repository": "https://github.com/paat/claude-plugins",
  "license": "MIT",
  "keywords": [
    "pretooluse",
    "guardrail",
    "irreversible",
    "deny-list",
    "blast-radius",
    "rm-rf",
    "terraform-destroy",
    "drop-table",
    "safety"
  ]
}

plugins/irreversible-guard/.claude-plugin/plugin.json

{
  "name": "irreversible-guard",
  "version": "0.2.2",
  "description": "PreToolUse gate that blocks Bash commands with no practical local undo — de-obfuscates ssh/docker-exec transports, heredocs, command chains, and env prefixes, then matches a tiered deny-set (irreversible-everywhere ops block unconditionally; locally-reversible ops block only when the command names production)",
  "author": {
    "name": "Andre Paat"
  },
  "repository": "https://github.com/paat/claude-plugins",
  "license": "MIT",
  "keywords": [
    "pretooluse",
    "guardrail",
    "irreversible",
    "deny-list",
    "blast-radius",
    "rm-rf",
    "terraform-destroy",
    "drop-table",
    "safety"
  ]
}

Browse the “pretooluse” tag →

bouncer

by Karan Bansal

A one-file PreToolUse door-guard that bounces destructive Bash commands (rm -rf, DROP TABLE, curl|sh, force-push, device wipes) before they run. Blocks 45/45 known footguns, 0 false positives.

CodexClaude Code

5Updated 3 months ago

arbeitsplan

by Anselm Hahn

Compiles a stated problem into an executable, budgeted agentic workflow, runs it as a redundant swarm — N candidates over the SAME scope in their own git worktrees, judged blind, exactly one landed and the rest deleted — and refuses to converge by retrying. Ordering is delegated to takt via a generated beat declaration rather than enforced twice. Writes to a scoped output directory (analysis/arbeitsplan/**), to candidate worktrees under .arbeitsplan/**, and — only behind an explicit approval gate — to .claude/takt.local.md; the single landing step is the one place it touches the working tree. A PreToolUse hook denies an identical re-dispatch, an out-of-scope write, a shared-tree write during a fan-out, and a dispatch past the declared budget. Ships a headless `claude -p` matrix runner for sweeps that need a fresh process and a real per-cell --model.

Claude Code8 Skills

1Updated yesterday

gates

by Devrik

Deterministic gates for Claude Code: destructive-command blocks, protected paths, delegation briefs, spec-driven flow and session-start validation. Selection lives in config, not in code.

Claude Code

1Updated 3 weeks ago

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[irreversible-guard on Agent Plugins Marketplace](https://pluginsmp.com/plugins/irreversible-guard)