Claude Code mod

honmoon-redact

Client-side secret/PII redaction hooks: keep API keys and sensitive identifiers out of Claude Code's model context by redacting Read/Bash/Grep tool output, blocking prompts that carry secrets, and denying reads of known credential files. Session-transcript scrubbing verified on Claude Code 2.1.263 (updatedToolOutput is what gets persisted); re-verify on other versions.

7 starsGuard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source
git clone https://github.com/pleaseai/honmoon.git
claude --plugin-dir ./honmoon/packages/claude-plugin

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L3Network: network, runs processes, draws
Sees
Read|Bash|Grep|WebFetch calls, every prompt
Hooks
tool.callprompt.submit

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Folder
packages/claude-plugin
Author
Honmoon
License
Apache-2.0
Last updated
26 October 2026

FAQ

What is honmoon-redact?

Client-side secret/PII redaction hooks: keep API keys and sensitive identifiers out of Claude Code's model context by redacting Read/Bash/Grep tool output, blocking prompts that carry secrets, and denying reads of known credential files. Session-transcript scrubbing verified on Claude Code 2.1.263 (updatedToolOutput is what gets persisted); re-verify on other versions. It is a mod for Claude Code, from pleaseai/honmoon on GitHub.

What can the honmoon-redact mod access?

Its widest reach is "network" (network, runs processes, draws). It sees Read|Bash|Grep|WebFetch calls, every prompt. Like any mod, it runs with your permissions.

How do I install honmoon-redact?

Clone pleaseai/honmoon and start Claude Code with --plugin-dir pointing at the mod's folder (packages/claude-plugin).

Is honmoon-redact popular?

pleaseai/honmoon has 7 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 26 October 2026.

More guard & safety mods

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.