frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

I Built a Claude Code Plugin That Detects and Blocks It Before Changes Happen

1•andreahlert•1h ago
We've all been there: You give Claude Code a simple prompt like "Fix the typo in utils.js," and suddenly it's refactoring your entire config file or adding unrelated imports. This isn't just annoying - it's scope creep, where the AI oversteps the task boundaries, introducing unauthorized modifications that can erode trust, bloat your codebase, and create security risks. But what if we treated scope creep not as an inevitable quirk of LLMs, but as something we can proactively guard against?

Inspired by discussions here and on X about AI agents going rogue with hallucinations or excessive edits, I decided to build Scope Guard: a lightweight plugin for Claude Code that intervenes before the agent completes its work, ensuring edits stay strictly within your specified intent.

Why Scope Creep Matters Scope creep happens because LLMs like Claude are trained to be helpful, but without explicit boundaries, they infer too much—leading to changes in files you didn't mention, or additions that seem "obviously" related but aren't. In production workflows, this means more time debugging, reviewing, or rolling back. Recent threads (like those on hallucinations in Claude Code) show this is a growing pain point as we rely more on AI for coding.

Introducing Scope Guard Scope Guard is a zero-dependency JavaScript plugin that hooks into Claude Code's lifecycle to enforce prompt adherence. It's minimalist by design: no API keys, no config files, just plug-and-play.

Key Features: Prompt Capture: Saves your original instruction for reference.

Real-Time Change Tracking: Logs edits asynchronously without slowing down the agent.

Strict Evaluation: Uses Git diffs to analyze modifications post-tool use. Only allows changes to explicitly mentioned files or those logically essential (e.g., a test file for a function update). Everything else? Blocked as scope creep.

User-Friendly Intervention: If creep is detected, it halts completion and explains why, with options to approve, undo, or refine your prompt.

Cleanup Script: Keeps your project tidy by removing old session data.

How It Works Install via /plugins add https://github.com/andreahlert/scope-guard in Claude Code.

On prompt submit, it captures the intent.

As the agent edits, changes are tracked.

Before stopping, it evaluates: Is this file mentioned? Is the change required? If not—bam, intervention.

Examples:

Allowed: Prompt "Add email validation to auth.js" → Edits auth.js and auth.test.js.

Blocked: Same prompt → Tries to tweak unrelated db.js? Nope.

It's licensed under AGPL-3.0, and the repo is open for contributions. Check it out here: https://github.com/andreahlert/scope-guard. Star it if this resonates, fork it if you want to hack on it, or drop feedback in the issues—I'd love to hear how it fits (or doesn't) in your workflow.

What do you think? Have you run into scope creep with Claude Code? Let's discuss below!

Cheers, André

Show HN: OneMinuteBranding – From prompt to brand system and Claude.md in 60s

https://www.oneminutebranding.com
1•YannBuilds•2m ago•0 comments

The Missing Layer

https://yagmin.com/blog/the-missing-layer/
2•lubujackson•5m ago•0 comments

In Defence of GnuPG: Key Sovereignty in an Age of Digital Feudalism [video]

https://fosdem.org/2026/schedule/event/WHHWGT-in-defence-of-gnupg/
1•m3rcury•5m ago•0 comments

A developers' job is to reduce ambiguity

https://old.reddit.com/r/ExperiencedDevs/comments/1qq8y8u/comment/o2f1f0b/
1•abrbhat•12m ago•0 comments

Why Replacing Developers with AI Is Going Horribly Wrong? [video]

https://www.youtube.com/watch?v=WfjGZCuxl-U
1•wg0•13m ago•0 comments

Sazabi Manifesto

https://www.sazabi.com/manifesto
1•puppion•14m ago•0 comments

I've created a tool to make your Discord server indexable on Google and AI

2•jackota•16m ago•1 comments

DAiFi Whitepaper Released: A New Era of Decentralized AI Finance

https://www.daifi.ai/blog/daifi-whitepaper-released
1•whatsupdog•18m ago•1 comments

Show HN: LocalCoder – Tell it your hardware, get the exact local AI model to run

https://localcoder.xyz
1•JoseOSAF•18m ago•0 comments

Show HN: Replacing NotNull and Preconditions with fluent Java assertions

https://github.com/Sympol/pure-assert
1•symplice•21m ago•0 comments

Ads are coming to AI. But not to Claude

https://twitter.com/claudeai/status/2019071113741906403
1•johnjames87•23m ago•0 comments

Show HN: Ikka – A noise-free, AI-powered news aggregator for Zimbabwe

https://www.ikka.cloud/
1•mugamuga•25m ago•0 comments

AAsk HN: Best GitHub API ingestion without tripping secondary rate limits?

https://openclawskills.best/
1•cutecatarya•26m ago•1 comments

ArXiv future proofs access to research with third-party digital preservation

https://blog.arxiv.org/2026/02/03/arxiv-future-proofs-access-to-research-with-third-party-digital...
2•gslin•27m ago•0 comments

A Wargame Shows Just How Vulnerable Europe Is to a Russian Attack

https://www.wsj.com/world/europe/a-wargame-shows-just-how-vulnerable-europe-is-to-a-russian-attac...
1•JumpCrisscross•28m ago•0 comments

Show HN: Blaeckfetch – Minimal system fetch with retro console-style splash mode

https://github.com/gustafeden/blaeckfetch
1•gustafeden•30m ago•0 comments

Validation is the bottleneck. Not code gen

https://www.kerno.io/blog/ai-dlc-for-startup
1•karimtr•30m ago•0 comments

Russia used Starlink in drones; SpaceX's cutoff collapsed command system

https://euromaidanpress.com/2026/02/05/russia-used-starlink-in-strike-drones-that-reached-kyiv-sp...
3•c420•31m ago•1 comments

Justice.gov JEE files contains bash manual

https://framapiaf.org/@bitecode/116014584956841267
8•sametmax•31m ago•3 comments

Watch Claude Code iteratively improve its reference bitnet NN implementation [video]

https://www.youtube.com/watch?v=tbAkySCXyp0
1•logicallee•32m ago•1 comments

Curl install Python CLI tools without dealing with Python

https://uvx.sh/
1•sametmax•33m ago•0 comments

Claude says ads are coming to AI but not to Claude

https://twitter.com/claudeai/status/2019071113741906403/mediaViewer
2•phanimahesh•35m ago•1 comments

Show HN: Claude Code Skill for Scaffolding Arbitrum Stylus and Solidity DApps

https://github.com/hummusonrails/arbitrum-dapp-skill
1•bcgreenberg•35m ago•1 comments

Test management tools for automation heavy teams

1•Divyakurian•36m ago•0 comments

Pandoc in the Browser

https://pandoc.org/app/
3•ravenical•36m ago•0 comments

You can find the bash manual in the Epstein files

https://bsky.app/profile/bitecode.dev/post/3me2uffilyc2h
2•BiteCode_dev•38m ago•0 comments

Computers Can Be Understood

https://blog.nelhage.com/post/computers-can-be-understood/
1•sebg•40m ago•0 comments

Show HN: StatCalc – Statistical Calculator with Clear Visualizations

https://echomoltinsson.github.io/statcalc/
1•onyx_writes•40m ago•0 comments

Factory 95: A Retro-Windows inspired automation game about making PowerPoints

https://bsky.app/profile/liamflannery.bsky.social/post/3m7lilxuyz225
2•mariuz•41m ago•0 comments

FTSE 100 Live: Trillion-dollar tech sell-off rocks global markets

https://www.cityam.com/ftse-100-live-tech-sell-off-ai-trillion-bank-of-england-interest-rate-cut-...
1•user20180120•44m ago•0 comments