diff --git a/README.md b/README.md
index 0670365..5746630 100644
--- a/README.md
+++ b/README.md
@@ -355,6 +355,7 @@ Install or disable them dynamically with the `/plugin` command — enabling you
 - [compliance-automation-specialist](./plugins/compliance-automation-specialist)
 - [data-privacy-engineer](./plugins/data-privacy-engineer)
 - [enterprise-security-reviewer](./plugins/enterprise-security-reviewer)
+- [handrail](https://github.com/trimkeep/claude-plugins) - Fail-closed deny/ask hooks for Claude Code and other agent CLIs; marketplace `trimkeep`, install `handrail@trimkeep`.
 - [security-sweep](https://github.com/Onome-AJ/security-sweep-plugin) - Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scans for hardcoded secrets, injection flaws, auth issues, misconfigurations, AI-specific vulnerabilities, mobile security, and data exposure.
 - [legal-advisor](./plugins/legal-advisor)
 - [legal-compliance-checker](./plugins/legal-compliance-checker)