honmoon-redact

Client-side secret/PII redaction hooks: keep API keys and sensitive identifiers out of Claude Code's model context by redacting Read/Bash/Grep tool output, blocking prompts that carry secrets, and denying reads of known credential files. Session-transcript scrubbing verified on Claude Code 2.1.263 (updatedToolOutput is what gets persisted); re-verify on other versions.

honmoon-redact reaches L3 (network) and passed claude plugin validate on Claude Code 2.1.302.

Events hooked: 2
API methods referenced: 6
Access from classified calls: L3, network: network, runs processes, draws
Static scan, not a runtime test

To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.

Access

L3 Uses the networknetwork, runs processes, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: Read|Bash|Grep|WebFetch calls, every prompt
Hooks: tool.call {tool=Read|Bash|Grep|WebFetch}, prompt.submit
API calls: $.clock.sleep, $.http.fetch, $.process.run, $.session.cwd, $.session.id, $.ui.log
Validation on 2.1.302: Passed
Scanned revision: e722aca593fa

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/pleaseai--honmoon--honmoon-redact-reach.svg)](https://mods.aidojo.si/mods/pleaseai--honmoon--honmoon-redact/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/pleaseai--honmoon--honmoon-redact-validates.svg)](https://mods.aidojo.si/mods/pleaseai--honmoon--honmoon-redact/)