All Claude Code modslegostin/claude-code-secret-guard

secret-guard

A Claude Code mod in legostin/claude-code-secret-guard

Keeps secrets out of Claude's context: gitleaks scans every tool output, prompt and attachment before the model reads it, and you decide what the model sees.

secret-guard reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.

Events hooked: 10
API methods referenced: 19
Access from classified calls: L2, writes or runs: runs processes, writes the prompt box, reads files, reads env vars, persists state, draws
Unclassified calls: 2 ($.state.get, $.state.set), full access unknown
Static scan, not a runtime test

Install hint

/plugin install secret-guard --marketplace legostin/claude-code-secret-guard

From the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsother: $.state.get, other: $.state.set, runs processes, writes the prompt box, reads files, reads env vars, persists state, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: every tool call, every prompt, the system prompt
Hooks: session.start, command.run {command=secrets}, ui.render {component=Pane, requestId=secret-guard}, prompt.compose, tool.call, session.append, prompt.submit, prompt.mention, prompt.attachment, prompt.context
API calls: $.clock.after, $.clock.now, $.command.register, $.env.get, $.fs.exists, $.fs.read, $.process.run, $.prompt.fill, $.session.id, $.session.root, $.state.get, $.state.set, $.store.get, $.store.set, $.ui.ask, $.ui.open, $.ui.resolve, $.ui.status, $.ui.toast
Validation on 2.1.302: Passed
Scanned revision: abd15621a611
Marketplace passed: secret-guard

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/legostin--claude-code-secret-guard--secret-guard-reach.svg)](https://mods.aidojo.si/mods/legostin--claude-code-secret-guard--secret-guard/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/legostin--claude-code-secret-guard--secret-guard-validates.svg)](https://mods.aidojo.si/mods/legostin--claude-code-secret-guard--secret-guard/)