← Browse
kubectl-guard
filippobuletto ★ 1
This Claude Code plugin uses a PreToolUse hook to intercept kubectl and helm commands run through the Bash tool, allowing only read-only operations via an allowlist while blocking or confirming attempts to modify clusters, read secrets, or change identity. It inspects command strings before execution and enforces the policy through hard denials for dangerous operations and an ask-or-deny mode for verb violations.
Install
> /plugin marketplace add filippobuletto/kubectl-Guard-for-Claude-Code
> /plugin install kubectl-guard
Source: https://github.com/filippobuletto/kubectl-Guard-for-Claude-Code
What it's made of
1 hook
- Commands
- 0
- Agents
- 0
- Skills
- 0
- MCP servers
- 0
- Hooks
- 1 · PreToolUse
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
bash- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (filippobuletto).