All Claude Code modsccdwyer/secret-sentry

secret-sentry

A Claude Code mod in ccdwyer/secret-sentry

Two-way secret scrubbing: redacts credentials before the model sees them and blocks writing them into tracked files or shell commands

secret-sentry reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.

Events hooked: 3
API methods referenced: 8
Access from classified calls: L2, writes or runs: runs processes, reads files, draws
Unclassified calls: 2 ($.state.get, $.state.set), full access unknown
Static scan, not a runtime test

To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsother: $.state.get, other: $.state.set, runs processes, reads files, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: every prompt, every tool call
Hooks: prompt.submit, session.append, tool.call
API calls: $.fs.exists, $.fs.read, $.fs.stat, $.process.run, $.state.get, $.state.set, $.ui.status, $.ui.toast
Validation on 2.1.302: Passed
Scanned revision: e20e35e2064e

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/ccdwyer--secret-sentry--secret-sentry-reach.svg)](https://mods.aidojo.si/mods/ccdwyer--secret-sentry--secret-sentry/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/ccdwyer--secret-sentry--secret-sentry-validates.svg)](https://mods.aidojo.si/mods/ccdwyer--secret-sentry--secret-sentry/)