All Claude Code modsjoeldg/claude-mods
secret-guard
Holds back a prompt that looks like it carries a secret (API keys, tokens, access-key pairs, private keys, passwords) before it reaches the transcript, puts it back in the box, and offers to save the secret as an env var in ~/.zshrc and send $NAME instead. No model calls.
secret-guard reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 5
- API methods referenced: 12
- Access from classified calls: L2, writes or runs: writes files, writes the prompt box, reads files, reads env vars, draws
- Unclassified calls: 2 (
$.state.get,$.state.set), full access unknown - Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsother: $.state.get, other: $.state.set, writes files, writes the prompt box, reads files, reads env vars, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- every prompt
- Hooks
session.start, prompt.submit, session.append {door=command}, command.run {command=secrets}, ui.render {component=AbovePrompt}- API calls
$.clock.now, $.command.register, $.env.get, $.fs.exists, $.fs.read, $.fs.write, $.prompt.fill, $.state.get, $.state.set, $.ui.log, $.ui.resolve, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
221157fc21b5
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from joeldg/claude-mods
- dev-serversA Servers pane for this project's dev servers: what is listening, on which port, since when, with Start, Stop…
- downloads-dropNotices files that land in Downloads while you work (PDFs, 3MF models, images, notes) and offers them in a ba…
- effort-routerRoutes each turn's effort from your prompt: git housekeeping replies ("merged", "commit and push", "push it")…
- job-watchLive pane of long-running jobs (training, downloads, extractions): progress, ETA, stalls and finishes, read f…
- machine-guardMemory, swap, GPU and the CPU cores macOS is using on the status line, and a machine_status tool for Claude;…
- mod-monitorWatches how your other mods really behave: hook failures and slow hooks (read off the chain's own trace), wha…
- modal-meterWatches your Modal apps from the CLI, in projects that use Modal: running apps and containers on the status l…
- pr-autopilotWatches your open pull requests: CI pass/fail toasts for the PRs you open here, failing-check logs attached w…
- recallMakes past sessions recallable: indexes Claude Code and Codex transcripts, subagent runs, memory files, stand…
- repo-briefGathers the repo's state at session start (branch, ahead/behind, uncommitted work, recent commits, open PRs w…
- routine-watchTells you when a scheduled routine (a scheduled-task run) stops to wait on you: a Mac notification, an option…
- second-opinion/second-opinion asks Fable (or the model you set) for a candid senior review of your recent commits, branch,…
- slicer-handoffHands models to the right slicer: full-spectrum (Snapmaker U1) files Claude tries to open in Bambu Studio go…
- stall-alarmRaises the alarm when a long-running session stalls while you are away: a permission dialog or a question tha…
- standing-ordersKeeps the instructions you give Claude ("never…", "from now on…", "in this project…") as standing orders for…
- usage-meterA machine-wide meter of the plan's rolling 5-hour usage: every session's turns summed as effective tokens, th…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/joeldg--claude-mods--secret-guard/)
[](https://mods.aidojo.si/mods/joeldg--claude-mods--secret-guard/)