All Claude Code modsdavidho27941/cockpit
secret-guard
Keeps API keys, cloud credentials and other secrets out of what is sent to the model: every text that enters the conversation is scanned and each match is replaced with a meaningful placeholder such as <google api key>.
secret-guard reaches L1 (reads) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 8
- API methods referenced: 7
- Access from classified calls: L1, reads: reads env vars, draws
- Unclassified calls: 2 (
$.state.get,$.state.set), full access unknown - Static scan, not a runtime test
Install hint
/plugin install secret-guard --marketplace davidho27941/cockpitFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L1 Reads filesother: $.state.get, other: $.state.set, reads env vars, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- every prompt, every tool call, the system prompt
- Hooks
session.start, prompt.submit, tool.call, session.append, prompt.context, prompt.attachment, command.run {command=secret-guard}, ui.render {component=AbovePrompt}- API calls
$.clock.now, $.command.register, $.env.get, $.state.get, $.state.set, $.ui.resolve, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
0a484d9414d4- Marketplace passed
- cockpit
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from davidho27941/cockpit
- auto-handoverWhen context usage reaches your threshold, writes a handover note over the cached conversation prefix, compac…
- blast-radiusHolds risky shell commands (rm -rf, git reset --hard, git clean, force push, migrations) and shows what they…
- cache-keeperKeeps the prompt cache warm while a session idles: every 50 minutes (configurable) one tiny request over the…
- gcloud-guardHolds gcloud and gsutil commands that would create, change or delete cloud resources, shows the account, proj…
- opsx-boardOpenSpec board: which phase you are in (propose/apply/archive), which tasks.md task is current, and every sub…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/davidho27941--cockpit--secret-guard/)
[](https://mods.aidojo.si/mods/davidho27941--cockpit--secret-guard/)