All Claude Code modsrevenantworks/claude-skills

shroud

A Claude Code mod in revenantworks/claude-skills

Revenantworks shroud mod for Claude Code 2.1.287+: masks secrets (its own shapes plus the gitleaks rule set), stream keys and, if you turn them on, personal data and your own word list before Claude reads them (restoring a value only into the gitignored file it came from), flags a credential keywarden marked for rotation, and marks web, MCP and mail results and messages from routines or other sessions as data. Kept apart from the vigil plugin, so safety never depends on the dashboard. Never blocks your work; keeps no record; contacts no service.

shroud reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.310.

Events hooked: 8
API methods referenced: 14
Access from classified calls: L2, writes or runs: runs processes, writes files, drives Claude, reads files, reads env vars, draws
Static scan, not a runtime test

Install hint

/plugin install shroud --marketplace revenantworks/claude-skills

From the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsruns processes, writes files, drives Claude, reads files, reads env vars, draws

Validation

Passed on Claude Code 2.1.310

View the source on GitHub Back to the list

What the scan recorded

Observed events: every prompt, every tool call
Hooks: session.start, prompt.submit, tool.call, session.append, session.receive, command.run {command=rw-shroud}, command.run {command=privacy}, command.describe {command=privacy}, turn.complete
API calls: $.clock.after, $.clock.every, $.clock.now, $.command.register, $.env.get, $.fs.read, $.fs.write, $.process.run, $.prompt.submit, $.session.cwd, $.session.id, $.session.repo, $.session.surfaces, $.ui.toast
Validation on 2.1.310: Passed
Scanned revision: ba4fdc2cebb6
Marketplace passed: revenantworks

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/revenantworks--claude-skills--shroud-reach.svg)](https://mods.aidojo.si/mods/revenantworks--claude-skills--shroud/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/revenantworks--claude-skills--shroud-validates.svg)](https://mods.aidojo.si/mods/revenantworks--claude-skills--shroud/)