- block-persistence-shapesbyopen-coder-ai
Best-effort guard against shell commands that publish or keep access after the session: npm/pnpm/yarn/twine/…
- block-unguarded-agent-spawnbyopen-coder-ai
Best effort. Refuses agents with safety off: claude --dangerously-skip-permissions, bypassPermissions, wildcard…
- scan-suppression-markersbyopen-coder-ai
Asks a person before a change adds a scanner suppression: inline ignore markers (bandit, gosec, ruff S codes, Sonar,…
