Installing Cordon

Cordon stands between untrusted text and what the agent does with it. It ships as a Claude Code plugin bound to four harness events: the user's message, a tool call, a tool result, the display of the answer.

Node 22 or newer. No keys, no tokens, no network access: there are no network requests and no model calls on the hot path.

Install

/plugin marketplace add ilyautov/cordon
/plugin install cordon@cordon