cd /news/ai-agents/i-built-guardrails-for-claude-code-a… · home topics ai-agents article
[ARTICLE · art-132243] src=dev.to ↗ pub= topic=ai-agents verified=true sentiment=↑ positive

I built guardrails for Claude Code after it told me a fix "worked" when it didn't

A developer released the Claude Code Guardrails Pack, a free MIT-licensed set of hooks and skills designed to stop agentic coding tools like Claude Code, Cursor, and Windsurf from claiming work is complete without verification. The pack includes an unlazy skill, a handoff skill, a safe_git_guard.py script that blocks destructive git commands on dirty trees, and a pre-commit secret scanner, each shipping with the exact command used to verify it. A $14 Pro version adds a secret-scanning hook, a per-session tool-call budget guard, and pre-PR and subagent fan-out skills.

by read1 min views22 publishedSep 17, 2026

Just shipped this after getting burned one too many times: Claude Code Guardrails Pack — free hooks and skills that stop an AI coding agent from claiming work is done when it never actually checked.

You've probably hit this if you use Claude Code (or Cursor, Windsurf, any agentic coding tool) for real work:

This is the single most-reported frustration with agentic coding tools right now, and I couldn't find a paid tool that addressed it directly — so I built the free version first.

`unlazy` skill`handoff` skill`safe_git_guard.py`` checkout --`, `reset --hard`, `clean -f`) when the tree is dirty` pre-commit-secret-scan.sh`
MIT licensed: [https://github.com/kuvosu-coder/claude-code-guardrails-lite](https://github.com/kuvosu-coder/claude-code-guardrails-lite)

Every piece ships with the exact command used to verify it — including two real bugs the verification process caught before ship (a Windows interpreter-detection issue), documented in the open in the repo's VERIFICATION.md instead of quietly fixed and hidden. That's the whole philosophy: no claim without a real check behind it.

If the free pack's useful, there's a $14 Pro pack with a secret-scanning *Claude Code* hook, a per-session tool-call budget guard, and two skills (a real pre-PR checklist, and a framework for when subagent fan-out actually helps vs. burns context): [https://kuvosu.gumroad.com/l/claudecodeguardrails](https://kuvosu.gumroad.com/l/claudecodeguardrails)

If you try it and something doesn't work as documented, tell me the exact command and output — that's the standard I'm holding this to, so "doesn't work" isn't actionable but "ran X, expected Y, got Z" gets fixed fast. Stars/feedback on the repo appreciated if it's useful to you.
── more in #ai-agents 4 stories · sorted by recency
── more on @claude code 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/i-built-guardrails-f…] indexed:0 read:1min 2026-09-17 ·