All Claude Code modsLupusMalusDeviant/claude-mods
screen-mask
For screen sharing and recordings: hides API keys, tokens, private keys, e-mail addresses, IP addresses, your login name in paths and any names you list. Only the display changes; Claude still reads the original. Nothing leaves the machine. /mask switches it.
screen-mask reaches L1 (reads) and passed claude plugin validate on Claude Code 2.1.308.
- Events hooked: 3
- API methods referenced: 8
- Access from classified calls: L1, reads: reads env vars, reads mod state, persists state, draws
- Reads mod state: the scan does not record whose state, so this does not show that it reads another mod’s values
- Static scan, not a runtime test
Install hint
/plugin install screen-mask --marketplace LupusMalusDeviant/claude-modsFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L1 Readsreads env vars, reads mod state, persists state, drawsValidation
Passed on Claude Code 2.1.308View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Only what it hooks
- Hooks
ui.render {component=AbovePrompt}, session.start, command.run {command=mask}, ui.render {component=AssistantMessage}, ui.render {component=UserMessage}, ui.render {component=ToolUse}, ui.render {component=ToolResult}, ui.render {component=ToolGroup}, ui.render {component=AbovePrompt}- API calls
$.command.register, $.env.get, $.state.get, $.state.set, $.store.get, $.store.set, $.ui.resolve, $.ui.toast- Validation on 2.1.308
- Passed
- Scanned revision
8fd44dbf7b77- Marketplace passed
- claude-mods
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.
More from LupusMalusDeviant/claude-mods
- blast-radiusHolds risky shell commands (rm -rf, git reset --hard, git clean, force push, migrations) and shows what they…
- cache-meterBand: time left on the warm cache, hit rate, context as weather with its trend over 12 turns, plan limits, co…
- ci-watchAfter every git push, follows the GitHub Actions runs (via gh) until they finish; with an open pull request (…
- handoff/handoff writes a handoff note to .claude/handoff.local.md; a new session offers to continue from it.
- package-guardBefore Claude installs or runs a package (npm, pnpm, yarn, bun, npx, pip, uv, poetry, pipx, cargo), asks the…
- petA little companion on the Windows desktop, always on top: a cardboard box or one of twelve figures (cat, dog,…
- read-guardHolds a whole-file Read (no offset/limit) of a file above the limit, a lockfile, minified code or a source ma…
- secret-guardStops before Claude writes API keys, tokens, private keys or a non-ignored .env into files, git add or commit…
- sign-guardSpots Windows builds (cargo --release, dotnet publish, go build, pyinstaller, tauri, electron-builder, msbuil…
- subagent-saverSearch subagents (Explore) that were given no model of their own run on a cheaper one instead of the main mod…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/LupusMalusDeviant--claude-mods--screen-mask/)
[](https://mods.aidojo.si/mods/LupusMalusDeviant--claude-mods--screen-mask/)