Deterministic security checks in Claude Code's path: package names before an install, secrets and code rules on what was just written, injection and Unicode-obfuscation patterns in fetched pages. No network call in any hook, no model in any check.
★not rated 1 todayA
tokens not measured
originalMIT
Pre-send risk check for AI agents that move money — screen an address or payment URL before sending. Runs locally from the payment-guard-mcp npm package.
★not rated 1 todayA
tokens not measured
originalMIT
Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets. Runs locally from the agent-firewall-mcp npm package.
★not rated 1 todayA
tokens not measured
originalMIT
10 no-LLM web tools: URL to Markdown, metadata, JSON-LD, MX, scrape, RSS, DNS, RDAP, SSL, HTTP. Runs locally from the web-tools-mcp npm package.
★not rated 1 todayA
tokens not measured
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: