All Claude Code modsdavidcoulson/crab-workshop
keymaster
Secret tripwire: masks API keys, tokens, passwords and private keys in tool output before Claude, the transcript or your screen sees them, says so in a toast, and counts saves in the status line. /keymaster lists what was masked (kind and place, never the value).
keymaster reaches L1 (reads) and passed claude plugin validate on Claude Code 2.1.312.
- Events hooked: 3
- API methods referenced: 8
- Access from classified calls: L1, reads: reads mod state, persists state, draws
- Reads mod state: the scan does not record whose state, so this does not show that it reads another mod’s values
- Static scan, not a runtime test
Install hint
/plugin install keymaster --marketplace davidcoulson/crab-workshopFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L1 Readsreads mod state, persists state, drawsValidation
Passed on Claude Code 2.1.312View the source on GitHub Back to the list
What the scan recorded
- Observed events
- every tool call
- Hooks
session.start, tool.call, command.run {command=keymaster}- API calls
$.clock.now, $.command.register, $.state.get, $.state.set, $.store.get, $.store.set, $.ui.status, $.ui.toast- Validation on 2.1.312
- Passed
- Scanned revision
d964cccebc7a- Marketplace warnings
- crab-workshop
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.
More from davidcoulson/crab-workshop
- codex-cornerA boxing ring for Codex adversarial reviews: each review is a round, your crab against the Codex bot, with fi…
- fuel-gaugeContext and plan-limit meter: context fill, the 5-hour and weekly windows and session cost in the status line…
- gatekeeperYour open PRs and what each waits on (/gates): the template boxes only you can tick, CodeRabbit threads and c…
- gpu-crabWhile a local-llm tool runs on your Ollama box, a crab on a treadmill shows the loaded model, VRAM, GPU/CPU s…
- house-rulesYour homelab conventions as rules on Claude's tool calls: a note, an ask or a refusal when a call breaks one…
- reefYour homelab as an aquarium (/reef): every Docker container is a fish coloured by its stack, unhealthy ones f…
- roll-callA status roll-up of your side sessions (/rollcall): each crab holds a sign saying where its session stands, w…
- trailer-guardPer-repo commit attribution policy: refuses a git commit, gh pr create/edit or git push that would carry a Co…
- vitals-stripUnraid and Home Assistant health above the prompt: array and ZFS pools, CPU and memory, the Docker service, t…
- where-am-iShows which machine and repo a session runs in (Mac or the claude-code container, repo, branch, fork) in the…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/davidcoulson--crab-workshop--keymaster/)
[](https://mods.aidojo.si/mods/davidcoulson--crab-workshop--keymaster/)