Claude Branch Guard — Git skill for Claude Code
Moved to karlkfi/claude-bouncer.
How to install Claude Branch Guard
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open karlkfi/claude-branch-guard and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Claude Branch Guard does
Moved to karlkfi/claude-bouncer. Branch-aware git permissions for Claude Code — auto-approve safe git/gh commands, pause at main and destructive ops.
Alternatives in Git
- Ws Reset — Reset the current branch to main, fetch upstream, and update submodules 38.1k ★
- OSS PR — Commit + PR workflow for open source contributions: auto-creates a user-prefixed branch when on main/master, t 19.7k ★
- Prime Isolation: Worktree Isolation And Git Ops Orientation — Prime Isolation: Worktree Isolation and Git Ops Orientation skill 17.6k ★
README
branch-guard
**This repository is archived and read-only. branch-guard now ships from [karlkfi/claude-bouncer](https://github.com/karlkfi/claude-bouncer).**
/plugin marketplace add karlkfi/claude-bouncer
/plugin install branch-guard@claude-bouncer
Those two lines replace the pair this repo used to document. The plugin itself did not change: same hook, same `main`/`master` protected set, same push policies, same `BRANCH_GUARD_OVERRIDE=` prefix. All seven `BRANCH_GUARD_*` variables keep their names and their defaults, so nothing in your own repo or `settings.json` needs editing.
The five guards — `workspace-guard`, `branch-guard`, `prod-guard`, `exit-status-guard`, `foreground-guard` — all parse the same Bash command strings, and were re-implementing that parser five times over. They share one now, so they share a repository, a test suite, and a release pipeline.
Where the docs went
[`plugins/branch-guard`](https://github.com/karlkfi/claude-bouncer/tree/main/plugins/branch-guard) in claude-bouncer: behavior table, the `git branch` ownership model, the push guard and its overlap check, the break-glass, config reference.
Read that rather than anything in this repo. The last release here was `v1.9.0` and claude-bouncer ships `1.10.0`, where two verdicts this README used to document as `ask` are now `deny`: a `git reset --hard` onto a tip nothing else reaches, and a push whose base moved into the lines the branch edits. The behavior tables here and the pages under `docs/` describe a version that no longer ships.
Switching an existing install
The marketplace name changes from `branch-guard` to `claude-bouncer`, so an existing install has to be removed and re-added — an update will not cross that boundary, and the old marketplace still clones fine, so nothing tells you it has gone quiet:
claude plugin uninstall branch-guard@branch-guard
claude plugin marketplace remove branch-guard
claude plugin marketplace add karlkfi/claude-bouncer
cl
Related Skills
Dippy
by Lily Dayton - Auto-approve safe bash commands using AST-based parsing, while prompting for destructive oper
Merge Worktree Approvals
Merge the Claude auto-approval permissions from a worktree into the main repo.
Aegis Approval Gate
PreToolUse hook that blocks destructive Bash ops (rm -rf, git push --force, DROP TABLE, etc.) until an active
Drift Fix
Resolve upstream fork-drift end-to-end — run the drift guard, mechanically bump every auto-bumpable pin, land
Destructive Command Guard
The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by ag
Thumbgate Protect
Show this repo's branch/release governance and grant a scoped, time-limited approval for an action that touche
Related Agents
Git Agent
Background git operations agent - commits, PRs, branch management, release workflows. Runs on Sonnet to free m
Merger
Reviews, validates, and merges arc-agents PRs. Sole authority for destructive git ops (rebase, push, merge, br
Deploy Guard
Pre-deploy validation gate. HUMAN-INVOKED ONLY. Project-scope permission rule Agent(deploy-guard) is DENIED in