Claude Warden — Security skill for Claude Code
Security hooks and monitoring for Claude Code — quiet overrides, SSRF protection, MCP compression, OTEL tracing.
How to install Claude Warden
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open johnzfitch/claude-warden and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Claude Warden does
Security hooks and monitoring for Claude Code — quiet overrides, SSRF protection, MCP compression, OTEL tracing.
Alternatives in Security
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
- Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
README
|
|
[![version][badge-version]][releases] [![license][badge-license]][license-file] [![platform][badge-platform]][repo]
claude-warden(token guardian) is a hook system for [Claude Code][claude-code] that intercepts every tool call before and after execution. It silences verbose commands, compresses large outputs, blocks unsafe network calls, enforces subagent budgets, and surfaces a live statusline — saving tens of thousands of tokens per session with negligible added latency.
Quickstart
- Install prerequisites:
jq(required). Optional:rg,fd. - Install hooks into
~/.claude/(symlink mode):./install.sh - Choose a profile when prompted (or pass
--profile standard). - Start a new Claude Code session. Hooks run automatically.
[!TIP] Run `./install.sh --dry-run` first to preview every change before anything touches `~/.claude/`.
./install.sh --dry-run
What it does
claude-warden
Related Skills
Claude On A Leash
Deterministic security guardrails for Claude Code. Six hooks that hard-block RCE, credential exfiltration, SSR
Claude Code Security Hooks
7 layers of defense against prompt injection in Claude Code. Security hooks, read guards, canary files, and se
Claude Code Security
Progressive hardening framework covering agent config protection, hooks, runtime security, injection preventio
GitHub Repo Lockdown
Lock down a public GitHub repo for safe community contributions — branch protection, CODEOWNERS, CI validation
Firewalla MCP Server
Firewalla MCP Server - Claude integration for network security monitoring and firewall management
MCP Threatintel
Threat intelligence MCP server for Claude Code. IOC lookups, CVE checks, breach monitoring, dark web search, a
Related Agents
Infra Builder
Infrastructure builder — implements hooks for SOT protection, session logging, MCP server integrations, and fa
Browser Testing
Browser automation and testing specialist. Uses playwright-cli (stateful Bash CLI) for deterministic scripted
Application Security
Manage Application Security Management (ASM) including WAF rules, threat detection, API protection, and applic
