All Claude Code modsVincitorecode/mods-equipo

detector-secretos

A Claude Code mod in Vincitorecode/mods-equipo

Revisa lo que Claude escribe y lo que va a commitear, y se detiene si encuentra API keys, tokens, llaves privadas o contraseñas; /secretos muestra el historial. · Stops Claude before it writes or commits API keys, tokens, private keys or passwords.

review UI rewrite

detector-secretos reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.

Events hooked: 4
API methods referenced: 14
Access from classified calls: L2, writes or runs: runs processes, reads env vars, reads settings, draws
Unclassified calls: 2 ($.state.get, $.state.set), full access unknown
Static scan, not a runtime test

Install hint

/plugin install detector-secretos --marketplace Vincitorecode/mods-equipo

From the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsother: $.state.get, other: $.state.set, runs processes, reads env vars, reads settings, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: Write calls, Edit calls, NotebookEdit calls, Bash calls
Hooks: session.start, command.run {command=secretos}, tool.call {tool=Write}, tool.call {tool=Edit}, tool.call {tool=NotebookEdit}, tool.call {tool=Bash}, ui.render {component=AbovePrompt}, ui.render {component=Pane, requestId=detector-secretos}
API calls: $.clock.now, $.command.register, $.env.get, $.process.run, $.session.cwd, $.settings.read, $.state.get, $.state.set, $.ui.ask, $.ui.invalidate, $.ui.log, $.ui.open, $.ui.resolve, $.ui.toast
Validation on 2.1.302: Passed
Scanned revision: 8affe9cb5ea8
Marketplace passed: mods-equipo
UI rewrite review: UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. plugins/detector-secretos/hooks/register.tsx:243

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/Vincitorecode--mods-equipo--detector-secretos-reach.svg)](https://mods.aidojo.si/mods/Vincitorecode--mods-equipo--detector-secretos/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/Vincitorecode--mods-equipo--detector-secretos-validates.svg)](https://mods.aidojo.si/mods/Vincitorecode--mods-equipo--detector-secretos/)