All Claude Code modsbaselane-sh/mods
secret-commit-guard
Asks before a git commit that would record a credential or a secret-named file. Reads the staged diff with git.
secret-commit-guard reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 1
- API methods referenced: 2
- Access from classified calls: L2, writes or runs: runs processes
- Static scan, not a runtime test
Install hint
/plugin install secret-commit-guard --marketplace baselane-sh/modsFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsruns processesValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- classic hooks
- Hooks
classic.PreToolUse- API calls
$.process.run, $.session.cwd- Validation on 2.1.302
- Passed
- Scanned revision
452251077ed9- Marketplace passed
- baselane-mods-dev
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from baselane-sh/mods
- achievementsUnlocks eight badges once each (first session, first green test run, 100 and 1,000 tool calls, 7-day streak,…
- agent-firewallA live pane of every tool call the agent makes: green when it ran, red when it was blocked, with counters. Op…
- ahead-behindA band above the prompt with the commits ahead and behind the upstream (↑2 ↓1), read with git status after ea…
- audit-packThree read-only audit commands in one mod: /secret-scan, /conflicts and /licenses. They read git, project fil…
- authorsAdds /authors: the top 15 contributors by commit count with their last commit date, from git log. Names only,…
- auto-formatRuns your project's own formatter on each file Claude writes or edits, only when the project has a formatter…
- auto-lintRuns your project's own linter fix (eslint, ruff or golangci-lint) on each file Claude writes or edits, only…
- band-packThe first six Baselane band meters in one row above the prompt: session cost, lattes, context bar, today's sp…
- battery-bandA band above the prompt with the Mac battery percent and charging state (🔋 87%, ⚡ 54% while charging), read…
- beadAdds /bead <id>: one bead with status, priority, labels, description, blockers and children. Read with bd, th…
- bead-chimePlays a short chime when a Bash call that ran bd close (or bd done) ends with exit code 0. It reads only the…
- bead-claim-nudgeAt turn end, if Claude edited a file and no bead is in progress, shows a toast and reminds Claude at your nex…
- bead-commit-nudgeAt turn end, if a git commit named no bead id while a bead is in progress, shows a toast and reminds Claude a…
- bead-nowA band above the prompt with the bead in progress you updated last and how many more are in progress, read wi…
- bead-stale-nudgeAt session start, one toast when beads in progress have had no update for 7 days, with their ids. Reads with…
- bead-streakCounts the days in a row you closed a bead, from Bash calls that ran bd close and exited 0. Adds /bead-streak…
- beads-bandA band above the prompt with your beads counts (bd 97 ready · 45 active · 29 blocked), read with bd status ev…
- beads-barsAll six beads bands in one row: counts, the bead in progress, epic progress, done percent, closed today and o…
- beads-done-barA band above the prompt with how much of your beads project is closed, as a bar and a percent (beads ████████…
- beads-guardAsks before bd commands that delete data or rewrite history: delete, purge, prune, gc, sql, admin, import, re…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/baselane-sh--mods--secret-commit-guard/)
[](https://mods.aidojo.si/mods/baselane-sh--mods--secret-commit-guard/)