Overview

ClawGod_Y is a runtime patch for the official Claude Code CLI that turns it into a tool dedicated to authorized penetration testing and security audits. It is not a third-party client: the installer extracts the official binary, applies AST-level patches, and runs the patched build with the Bun runtime.

The patch implementation draws on 0Chencc/clawgod. Thanks to the original project for its open-source work. This fork keeps upstream's cross-version patch architecture and installs the patched runtime separately:

• clawgod starts patched Claude Code, installing v2.1.322 by default. The patched runtime lives entirely under ~/.clawgod (%USERPROFILE%\.clawgod on Windows).
• If Claude Code is already installed, its original claude command stays unchanged. A separate official Claude Code installation is not required; an existing vanilla claude update keeps working normally.
• Designed for compatibility across versions. Patches use cross-version anchors and can be adapted to other Claude Code versions, but compatibility with every version is not guaranteed. You can select latest, stable, or a specific version during installation. Unmatched non-required patches produce warnings and are skipped; required prompt injection or source-processing failures still abort installation.
• Pentest-oriented patching: tool-permission prompts and safety classifiers are bypassed by default, prompts are rewritten for authorized testing contexts, and unused office/consumer features are pruned.

Usage

Requirements

Item	Requirement
Host	Windows, macOS, or Linux/WSL
Installer	Node.js 18 or later, including npm; run in an interactive terminal
Local runtime	Bun 1.3.14 or later (installed automatically if missing) and ripgrep (rg)
Windows	PowerShell 5.1 or later, with tar available
macOS / Linux / WSL	Bash, curl, and tar; automatic Bun installation also requires unzip

Installation

macOS / Linux / WSL:

curl -fsSL https://raw.githubusercontent.com/7sen1ot/ClawGod_Y/main/install.sh | bash -s -- latest

Windows PowerShell:

& ([scriptblock]::Create((irm https://raw.githubusercontent.com/7sen1ot/ClawGod_Y/main/install.ps1))) latest

Replace latest in the examples with stable or a specific version (such as 2.1.322) as needed. latest and stable use the versions associated with the corresponding npm tags.

After installation, open a new terminal and run clawgod to start patched Claude. If official Claude Code was already installed, claude still starts the original. The patched runtime is stored in ~/.clawgod, or %USERPROFILE%\.clawgod on Windows.

Configure a Model and Get Started

The first launch of clawgod creates ~/.clawgod/provider.json, or %USERPROFILE%\.clawgod\provider.json on Windows. This file is independent of Claude's own settings. To use an Anthropic-compatible API:

{
  "protocol": "anthropic",
  "apiKey": "REPLACE_WITH_YOUR_API_KEY",
  "baseURL": "https://api.anthropic.com",
  "model": "main-model-id",
  "smallModel": "small-model-id",
  "effort": "max",
  "timeoutMs": 3000000
}

For an OpenAI Chat Completions-compatible service, set protocol to openai-chat and enter the provider's baseURL, API key, and model name. If you use a Claude subscription login instead of API credentials, leave provider.json at its defaults — clawgod shares the existing login in ~/.claude.json. Save the file and restart clawgod.

Uninstallation

clawgod --uninstall

If clawgod cannot start, on macOS / Linux / WSL run bash ~/.clawgod/install.sh --uninstall; in Windows PowerShell run powershell -File "$env:USERPROFILE\.clawgod\install.ps1" -Uninstall.

Uninstallation removes the clawgod launcher, the main runtime files, and the separate ~/.clawgod/lean-settings.json file without modifying ~/.claude/settings.json. Configuration such as provider.json and features.json, along with some other files, is retained; the entire ~/.clawgod directory is not deleted.

Usage Limits and Security

Read the Disclaimer and Usage Compliance Notice before use.

• Legal authorization: Use only on your own systems, explicitly authorized targets, and CTFs or labs that permit testing. Stay within the authorized assets, time window, and operations. Unauthorized intrusion, data theft, and destruction are prohibited.
• Human review: Verify model judgments and tool findings against raw evidence, actual impact, and coverage. Patched sessions skip permission prompts, so every action executes without confirmation.
• Information protection: Before submitting source code, logs, credentials, or other materials, ensure compliance with confidentiality requirements and the model service's data processing terms.
• Resource control: Configure spending limits with your model service, and manually manage execution time, disk usage, and evidence retention.

Users must obtain testing authorization and are legally responsible for their actions and the resulting consequences. The project license does not grant permission to test third-party systems.

License and Related Files

This repository is licensed under the GNU General Public License v3.0. Use, modification, distribution, and commercial use are permitted subject to the license's terms. Distribution requires compliance with applicable obligations concerning copyright notices, the license, and corresponding source code. See LICENSE for the full terms.

Third-party software, dependencies, and brand assets remain subject to their respective licenses and rights notices. This repository's license does not replace the terms of use for Claude Code, model services, or other third-party components.

File	Contents
LICENSE	Full English text of the GNU GPL v3
SECURITY.md	Disclaimer, usage compliance requirements, and deployment risks