Agent skills for guardrails and AI safety in Claude Code
287 agent skills for guardrails and AI safety in the catalog list Claude Code as a supported host. These are the 15 that rank highest, ordered by adoption, freshness and documentation. ai-coding-agent-guardrails, git-guardrails-claude-code and ai-red-teaming lead the list. Claude Code reads them from .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project. A skill is a folder with a SKILL.md file; Claude Code loads it when a task matches its description. Every listing links to its source and shows a freshness grade.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
How to install in Claude Code
npx skills add <owner>/<repo> --skill <name> -a claude-code
Where it goes: .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project.
The host's docs describe copying a folder with a SKILL.md into a skills directory; the npx skills command is a third-party shortcut for the same thing.
Each listing page has the exact command for that listing.
Top 15 of 287
- 1ai-coding-agent-guardrails
devops-skills
Secure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission boundaries, secret protection, code review gates, and safe sandbox…
- Repository has 48.4K stars
- Active in the last 30 days
- Open source (MIT)
★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 2
设置 Claude Code hooks,在危险 git commands(push、reset --hard、clean、branch -D 等)执行前阻止它们。适用于用户想防止破坏性 git 操作、添加 git safety hooks,或在 Claude Code 中阻止 git push/reset 时。
- Repository has 5.2K stars
- Active in the last 30 days
- Open source (MIT)
★ 5.2KLast active Oct 8, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 3ai-red-teaming
devops-skills
Run structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.
- Repository has 48.4K stars
- Active in the last 30 days
- Open source (MIT)
★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 4
设置 Claude Code 钩子,在危险 Git 命令(push、reset --hard、clean、branch -D 等)执行前将其拦截。当用户想要防止破坏性 Git 操作、添加 Git 安全钩子或在 Claude Code 中阻止 git push/reset 时使用。
- Active in the last 30 days
- Open source (MIT)
- Ships helper scripts
★ 507Last active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 5aig-scanner
TencentOfficial
A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.
- Published by the vendor
- Repository has 7.1K stars
- Active in the last 30 days
★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 6plano-agent-skills
katanemo
Best practices for building agents and agentic applications with Plano, including configuration, routing, orchestration, guardrails, observability, and…
- Repository has 7.1K stars
- Active in the last 30 days
- Open source (Apache-2.0)
★ 7.1KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 7plano-filter-guardrails
katanemo
Harden Plano filter chains and guardrails.
- Repository has 7.1K stars
- Active in the last 30 days
- Open source (Apache-2.0)
★ 7.1KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 8paid-ads-amazon
nowork-studio
Plan and review Amazon Ads with margin-aware ACoS, product, and search-term guardrails.
- Repository has 4.1K stars
- Active in the last 30 days
- Open source (MIT)
★ 4.1KLast active Oct 9, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 9careful
garrytan
Safety guardrails for destructive commands.
- Repository has 137.5K stars
- Active in the last 30 days
- Open source (MIT)
★ 137.5KLast active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 10global-agent-guardrails
davidondrej
Configure the shared guard against catastrophic shell commands in local AI agents.
- Repository has 4.2K stars
- Active in the last 30 days
- Open source (MIT)
★ 4.2KLast active Oct 18, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 11svc-mobile-ios
s0ld13rr
iOS IPA static analysis — hardcoded secrets, ATS bypass, Keychain, jailbreak detection, reverse engineering with class-dump/ipsw.
- Active in the last 30 days
- Open source (MIT)
★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 12git-guardrails-claude-code
mattpocock
Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute.
- Largest repository here (302,383 stars)
- Active in the last 30 days
- Open source (MIT)
★ 302.4KLast active Oct 4, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 13investigation-cost-guardrail
tqquresh, inesttiaOfficial
Cost guardrail for AWS DevOps Agent that covers ALL AWS services and native agent tools.
- Published by the vendor
- Active in the last 30 days
- Open source (Apache-2.0)
★ 116Last active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 14nemotron-policy-generator
Shyamala Prayaga <sprayaga@nvidia.com>
Generates BYO custom safety policies for NVIDIA Nemotron content-safety guardrails — Nemotron-Content-Safety-Reasoning-4B (text) and multimodal…
- Repository has 3.7K stars
- Open source (Apache-2.0 AND CC-BY-4.0)
★ 3.7KLast active Jun 4, 2026Claude Code, Claude apps, Codex, Cursor +6
CFreshness: C–Security: not graded yet - 15engram-architecture-guardrails
gentleman-programming
Architecture guardrails for Engram across local store, cloud sync, dashboard, and plugins.
- Repository has 7.6K stars
- Active in the last 30 days
- Open source (Apache-2.0)
★ 7.6KLast active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet
Related
- Host guideAdd-ons for Claude Code
- Host guideAgent skills for Claude Code
- Host guideAgent skills for git workflows in Claude Code
- Host guideAgent skills for agent memory in Claude Code
- Host guideAgent skills for deployment in Claude Code
- Host guideAgent skills for software testing in Claude Code
- Host guideAgent skills for browser automation in Claude Code
- Host guideAgent skills for GitHub in Claude Code
- Best ofBest agent skills for guardrails and AI safety
- Best ofBest MCP servers for guardrails and AI safety
- Best ofBest agent skills for git workflows
- Best ofBest agent skills for agent memory
- Best ofBest agent skills for GitHub