secret-guard

A Claude Code mod in tksunw/secret-guard

Blocks git commit and git push from Claude when the change carries a secret file or a credential-shaped line, and flags secret files that are not gitignored

secret-guard reaches L2 (writes or runs) and passed claude plugin validate with warnings on Claude Code 2.1.302.

Events hooked: 1
API methods referenced: 5
Access from classified calls: L2, writes or runs: runs processes, reads files, reads env vars, draws
Static scan, not a runtime test

To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsruns processes, reads files, reads env vars, draws

Validation

Passed with warnings on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: Edit calls, Write calls, Bash calls
Hooks: tool.call {tool=Edit}, tool.call {tool=Write}, tool.call {tool=Bash}
API calls: $.env.get, $.fs.read, $.process.run, $.session.cwd, $.ui.toast
Validation on 2.1.302: Passed with warnings
Scanned revision: 5244dfb2ec5c

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/tksunw--secret-guard--secret-guard-reach.svg)](https://mods.aidojo.si/mods/tksunw--secret-guard--secret-guard/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/tksunw--secret-guard--secret-guard-validates.svg)](https://mods.aidojo.si/mods/tksunw--secret-guard--secret-guard/)