Plugin

aport-guardrails

Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OAP) policy before execution. Blocks unauthorized commands, dangerous file operations, and policy violations. All evaluation runs locally by default - zero network calls, works offline. Open-source (Apache 2.0). Includes three skills: - /aport-guardrails:claude-code — Set up guardrails and create a passport - /aport-guardrails:status — Check guardrail status and recent decisions - /aport-guardrails:openclaw — Set up guardrails for OpenClaw agents

• Published source
• Repository

Analysed

11 October 2026

Last observed

11 October 2026

What the code does

• Runs shell commands Code that starts system commands on the machine it runs on.
• Starts other processes Code that launches separate programs.
• Sends data to outside servers Code that posts data to network addresses.
• Refers to credential files Code that names files such as SSH keys or cloud credentials.
• Downloads and runs code Code that fetches a script and pipes it into a shell.
• Runs hooks automatically Hooks that execute without being called explicitly.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.