AxioRank for Claude Code
Govern Claude Code
Block destructive commands, secret exfiltration, and prompt-injected tool results in Claude Code, locally and offline, before they run. Then prove the session was governed with a signed Coding Session Seal.
Install for Claude Code
- 1
Add the marketplace
/plugin marketplace add AxioRank/claude-plugin
- 2
Install the plugin
Then reload or restart Claude Code. Local blocking works immediately, with no account.
/plugin install axiorank@axiorank
- 3
Or wire the hook directly (any agent)
Prefer the published npm hook? This wires the guard into the agent's hook config.
npx -y @axiorank/coding-guard init
Submitted to the Claude community marketplace. Once approved, install with /plugin install axiorank@claude-community.
What an ungoverned coding agent can do
Destructive commands
rm -rf, git push --force, DROP TABLE, or curl piped into a shell, run faster than you can read the diff.
Secret exfiltration
A generated command or file write ships an API key, a token, or your .env somewhere it should never go.
Agent hijacking
A poisoned MCP reply or fetched page carries hidden instructions that steer the agent (agentjacking).
Watch the guard decide
This runs the real detection engine in your browser, the same one the Claude Code hook runs on your machine. Pick an action, or edit the command, and see the verdict. No key, no network.
Edit the command. The guard re-scores it live, offline, with no API key.
A destructive operation was detected.
- Recursive/forced file delete
destructive - Dangerous CLI flag
destructive
Blocks locally, offline, no key
The exact AxioRank detection engine your production agents use, in the hook, on your machine. Destructive operations, secret exfiltration, and prompt-injected results are denied before they run.
Same control plane as production
Add a key and every governed call flows into the same policy, audit log, alerts, and approvals as your production agents. Org policy can only tighten the local decision, never loosen a block.
A signed seal nobody else mints
At session end AxioRank mints a Coding Session Seal: an Ed25519-signed, offline-verifiable proof of how many calls were governed and blocked. Provenance, not just a dashboard.
Blocking is free. Proof is the upgrade.
Local guardrails for Claude Code are free, with no account, and so is reporting a session to your workspace (within your normal event quota). The signed Coding Session Seal is the upgrade, on the Team plan and above.