Claude Code mod

keymaster

Secret tripwire: masks API keys, tokens, passwords and private keys in tool output before Claude, the transcript or your screen sees them, says so in a toast, and counts saves in the status line. /keymaster lists what was masked (kind and place, never the value).

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add davidcoulson/crab-workshop
/plugin install keymaster@crab-workshop

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L1Reads: reads mod state, persists state, draws
Sees
every tool call
Hooks
session.starttool.callcommand.run

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
davidcoulson/crab-workshop
Folder
plugins/keymaster
Marketplace
crab-workshop
Author
David Coulson
Type
Guard & safety mods
License
MIT
Last updated
12 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is keymaster?

Secret tripwire: masks API keys, tokens, passwords and private keys in tool output before Claude, the transcript or your screen sees them, says so in a toast, and counts saves in the status line. /keymaster lists what was masked (kind and place, never the value). It is a mod for Claude Code, from davidcoulson/crab-workshop on GitHub.

What can the keymaster mod access?

Its widest reach is "reads" (reads mod state, persists state, draws). It sees every tool call. Like any mod, it runs with your permissions.

How do I install keymaster?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add davidcoulson/crab-workshop and then /plugin install keymaster@crab-workshop.

More guard & safety mods

heavy-job-guard

azoof-ahmed/claude-mods

Stops Claude from starting a heavy job (typecheck, tests, builds) while another one is already running on the machine.

Guard & safety mods/plugin install

repo-guard

YuehengHan/my-claude-mods

Blocks destructive git commands and asks before Claude first edits a repo other than the session's own

Guard & safety mods

guardiao

juniormartinxo/jm-claude-mods

Veta ações perigosas do agente: ler arquivos de segredo (.env, chaves), rm -rf na raiz, push --force, reset --hard, DROP TABLE

Guard & safety mods

ringtones

UsamaSadiq/claude-mods

Short synthesized chimes when a long turn finishes, a call is blocked, a turn fails or you ship

Guard & safety mods/plugin install

dot

lucasleandro08/claude-mods

An always-on assistant with a name and a face: give it goals, and it keeps working on them in background rounds, asks before risky actions, briefs you in the morning and pings you when it needs a decision.

Guard & safety mods/plugin install

slopless

0xGondarxyz/claude-code-mods

Blocks AI sounding text in social media writing (X replies, X posts, LinkedIn posts) and injects the writing rules.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.