All Claude Code modsaislam23/secret-drop

secret-drop

A Claude Code mod in aislam23/secret-drop

Secure input window for API keys and passwords: Claude asks, you type into a masked field, the mod writes .env / GitHub Secrets itself. The value never enters the chat.

secret-drop reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.303.

Events hooked: 5
API methods referenced: 20
Access from classified calls: L2, writes or runs: runs processes, writes files, drives Claude, writes the prompt box, reads files, reads env vars, reads the prompt box, reads mod state, draws
Reads mod state: the scan does not record whose state, so this does not show that it reads another mod’s values
Static scan, not a runtime test

Install hint

/plugin install secret-drop --marketplace aislam23/secret-drop

From the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsruns processes, writes files, drives Claude, writes the prompt box, reads files, reads env vars, reads the prompt box, reads mod state, draws

Validation

Passed on Claude Code 2.1.303

View the source on GitHub Back to the list

What the scan recorded

Observed events: mcp__secret-drop__request_secret calls, every prompt
Hooks: session.start, tool.call {tool=mcp__secret-drop__request_secret}, command.run {command=secret}, prompt.submit, ui.render {component=AbovePrompt}
API calls: $.clock.after, $.command.register, $.env.get, $.fs.exists, $.fs.read, $.fs.write, $.process.run, $.prompt.fill, $.prompt.read, $.prompt.submit, $.session.append, $.session.cwd, $.state.get, $.state.set, $.tool.register, $.ui.close, $.ui.focus, $.ui.resolve, $.ui.status, $.ui.toast
Validation on 2.1.303: Passed
Scanned revision: a54d43a7eeab
Marketplace passed: secret-drop

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/aislam23--secret-drop--secret-drop-reach.svg)](https://mods.aidojo.si/mods/aislam23--secret-drop--secret-drop/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/aislam23--secret-drop--secret-drop-validates.svg)](https://mods.aidojo.si/mods/aislam23--secret-drop--secret-drop/)