PlugMyPlugin
← Browse

iac-check-guard

widnyana ★ 7

A PreToolUse hook that inspects and blocks destructive Infrastructure-as-Code commands (Ansible playbooks without --check, Terraform/OpenTofu/Terragrunt apply/destroy/import, and write-mode operations) before Claude executes them via the Bash tool. Read-only IaC operations like plan, validate, and check-mode runs pass through unaffected, allowing agents to safely test infrastructure code without applying unwanted changes.

Security DevOps No API key detected runs shell

Install

> /plugin marketplace add widnyana/eyay-toolkits/tree/HEAD/plugins/iac-check-guard
> /plugin install iac-check-guard

Source: https://github.com/widnyana/eyay-toolkits/tree/HEAD/plugins/iac-check-guard

What it's made of

1 hook

Commands
0
Agents
0
Skills
0
MCP servers
0
Hooks
1 · PreToolUse

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
bash
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (widnyana).