guardrails

{
  "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
  "name": "guardrails",
  "description": "Fourteen safety guards that block secret/credential writes, hardcoded machine-specific paths, git hook-bypass attempts, irreversible git operations (force-push, reset --hard, worktree-wide checkout/restore discards), Bash file-write workarounds that circumvent Write/Edit hooks, Windows drive-root /tmp writes (POSIX /tmp, C:\\tmp, \\tmp), an EXPORTED MSYS_NO_PATHCONV / MSYS2_ARG_CONV_EXCL that unconverts a later path argument on Windows, multi-line `git commit -m` messages (an actual-newline `-m` mangles across shells; single-line `-m` passes), commit subjects and gh pr create titles that violate the repo's tracked team convention (when one is declared in .claude/source-control.md), (advisory) hallucinated CLI flags, (advisory) /plugin:skill references that do not resolve, (advisory) markdown citing a repo path the repo's own history shows was removed, (advisory, opt-in) un-throttled Workflow fan-out that risks burst 529s, and (advisory, opt-in) direct gh pr create calls bypassing this marketplace's own pull-request skill \u2014 each independently toggleable.",
  "author": {
    "name": "Melodic Software",
    "email": "[email protected]"
  },
  "license": "MIT",
  "keywords": [
    "guard",
    "security",
    "secrets",
    "hooks",
    "pretooluse",
    "git",
    "hardcoded-paths",
    "cli-flags",
    "pull-request"
  ],
  "userConfig": {
    "secret_pattern_detection_enabled": {
      "type": "boolean",
      "title": "secret-pattern-detection guard",
      "description": "Block writes containing high-confidence secret/credential patterns",
      "default": true
    },
    "hardcoded_path_check_enabled": {
      "type": "boolean",
      "title": "hardcoded-path-check guard",
      "description": "Block writes containing hardcoded machine-specific paths",
      "default": true
    },
    "block_no_verify_enabled": {
      "type": "bool