Covenant Guard
Run Claude Code unattended: capped spend, sandboxed execution, signed receipt, enforced from outside the agent's process.
Works with: Claude Code, Cursor, Claude Desktop, Codex CLI, Gemini CLI, Cline, Windsurf, VS Code
Category: Security — see all ranked ›
Work: Agent configuration
Who it is for: Agent operator
“Platform README never names covenant-guard; says sandboxing for hostile code is roadmap.”
- tashan score: 58.0
- Expertise: 55.0 (thin)
- Adoption: 1 repos
- Health: active
- GitHub stars: 11
- Contributors: 10
- License: Apache-2.0
Security audit
Not scanned yet. We audit npm-published capabilities for known advisories, install-time scripts and permission surface; this one has no npm package we can resolve, or has not reached the queue.
source ↗ · plugin:open-covenant/covenant/covenant-guard
Already running this? npx tashan-cli doctor checks your whole config against the Index — how it works ›