Tatu: Open-source security layer for Claude Code blocks secrets and destructive commands
What Tatu does
Tatu is an open-source security layer built specifically for Claude Code. It functions as a hook system that intercepts every Claude Code action in real time before execution.
Key security features
- Blocks leaked secrets (like AWS keys written to config files)
- Flags PII (personally identifiable information)
- Denies destructive commands (such as 'rm -rf' in wrong directories)
Deployment and setup
Everything runs on your own infrastructure. The installation process is straightforward:
pip/pipx install tatu-hook
tatu-hook initThis puts you in audit mode immediately. The developer notes it's been running in production for them for a while, though it's still early days for the project.
Source information
The tool was created by a developer who has been using Claude Code heavily for months and became concerned about potential security risks. The motivation specifically mentions preventing AWS keys from being written to config files and avoiding destructive commands like 'rm -rf' in incorrect directories.
GitHub repository: github.com/laboratoriohacker-com/tatu
Project site: https://tatu.sh
📖 Read the full source: r/ClaudeAI
👀 See Also
Claude Code Routines: Automated Cloud Tasks for AI Development Workflows
Claude Code Routines allow developers to save Claude Code configurations as automated tasks that run on Anthropic-managed cloud infrastructure. Routines support scheduled, API, and GitHub triggers for unattended execution of prompts against repositories.
ShareMyClaudeMD: Tool Converts Claude-Generated Markdown Files to Shareable Rendered Pages
A developer built sharemyclaudemd.com, a free tool that converts any Markdown file into a live, rendered page with a shareable URL and QR code. The tool addresses the friction of sharing Claude-generated Markdown files, which often requires recipients to open them in a specific editor or push to GitHub just for a rendered view.
Crow: Open-Source MCP Platform Adds Persistent Memory and P2P Sharing to LLM Frontends
Crow is an open-source, self-hosted MCP server platform that provides LLM frontends with SQLite-backed persistent memory, structured research tools, and encrypted peer-to-peer sharing. It works with any MCP-compatible client like Claude Desktop, Cursor, or Windsurf and requires no cloud dependency by default.
Quell Proxy Fixes Claude Code Scroll-Jumping on Windows
Quell is a Rust proxy that sits between your terminal and Claude Code, stripping clear-screen sequences that cause scroll position resets during long responses. It also adds Shift+Enter for newlines, security filtering, and full Unicode support.