All Claude Code modsryx2/slopshopper
secret-shield
Keeps secrets out of the transcript and out of the repo: redacts API keys, tokens, private keys and password URLs from tool results before Claude reads them, and refuses a Write, Edit or Bash command that embeds one.
secret-shield reaches L0 (draws and remembers) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 6
- API methods referenced: 5
- Access from classified calls: L0, draws and remembers: draws
- Unclassified calls: 2 (
$.state.get,$.state.set), full access unknown - Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L1 Reads filesother: $.state.get, other: $.state.set, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Write|Edit calls, Bash calls
- Hooks
session.start, turn.start, command.run {command=secrets}, tool.call {tool=Write|Edit}, tool.call {tool=Bash}, session.append {door=tool-result}, ui.render {component=AbovePrompt}- API calls
$.command.register, $.state.get, $.state.set, $.ui.resolve, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
502c3921e5b7
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from ryx2/slopshopper
- burn-rateA fuel gauge above the prompt: context window fill, tokens in and out, dollars spent, dollars per hour, your…
- receiptsA ledger of what Claude touched this session: files created and edited, commands run and whether they failed,…
- slop-detectorCatches slop as Claude writes it: refuses a file edit that replaces code with a '... rest of the code' placeh…
- test-pulseRuns your test suite after every turn in which Claude changed source, and keeps the result above the prompt:…
- tripwireHolds destructive commands until you say so: rm -rf, force pushes, git reset --hard, DROP TABLE, curl | sh, s…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/ryx2--slopshopper--secret-shield/)
[](https://mods.aidojo.si/mods/ryx2--slopshopper--secret-shield/)