Help us improve
Share bugs, ideas, or general feedback.
From railgun
Manage Railgun security policies - lint config, test tool inputs, view policy
npx claudepluginhub douglance/railgunHow this skill is triggered — by the user, by Claude, or both
Slash command
/railgun:railgunThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Railgun protects your Claude Code sessions by intercepting tool calls and blocking:
Performs security reviews for risky code changes like sensitive file edits, shell commands, dependencies, CI/CD, and secrets using Clawdstrike MCP tools for policy checks.
Enforces runtime security policies on Claude Code actions via Pre/PostToolUse hooks, blocks dangerous shell commands/file ops/MCP calls, scans configs for OWASP ASI10 vulnerabilities, logs audit trails.
Blocks unsafe code before commit with secret scanning, OWASP Top 10 detection, dependency audits (npm/pip/cargo), and permission checks. Hard security gate on critical findings.
Share bugs, ideas, or general feedback.
Railgun protects your Claude Code sessions by intercepting tool calls and blocking:
rm -rf /, fork bombs, disk writes.env, .ssh/, *.pem, credentials filesValidate your railgun.toml configuration file:
# Find and run the appropriate binary
BINARY="${CLAUDE_PLUGIN_ROOT}/bin/rg-$(uname -s | tr '[:upper:]' '[:lower:]')-$(uname -m | sed 's/x86_64/x64/' | sed 's/aarch64/arm64/')"
"$BINARY" lint --config ./railgun.toml
Test how a specific tool input would be evaluated by the policy:
# Test a Bash command
echo '{"tool_name":"Bash","tool_input":{"command":"ls -la"}}' | "$BINARY" hook --config ./railgun.toml
# Test a file read
echo '{"tool_name":"Read","tool_input":{"file_path":"./src/main.rs"}}' | "$BINARY" hook --config ./railgun.toml
Exit code 0 = allowed, exit code 2 = blocked.
Copy the example configuration to customize:
cp "${CLAUDE_PLUGIN_ROOT}/railgun.example.toml" ./railgun.toml
Railgun looks for configuration in this order:
./railgun.toml (project-level)~/.config/railgun/railgun.toml (user-level)If Railgun blocks something you need: