Claude Code mod

secret-box

Claude can use a secret without seeing it: a masked box saves keys to .env and gives Claude a placeholder, every key a tool prints comes back as a placeholder, and committing .env is refused

101 starsGuard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add ray-amjad/claude-code-mods
/plugin install secret-box@claude-code-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L2Writes or runs: runs processes, writes files, drives Claude, reads files, reads env vars, draws
Sees
every prompt, every tool call, the system prompt, subagent spawns, Bash calls, /"^(Bash|Read|Grep|Edit|MultiEdit|NotebookEdit)$"/ calls, mcp__secret-box__request_secret calls
Draws in
PaneAbovePrompt
Hooks
prompt.submittool.callprompt.contextprompt.attachmentprompt.mentionagent.spawnsession.startsession.attachui.renderui.close

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
ray-amjad/claude-code-mods
Folder
plugins/secret-box
Marketplace
claude-code-mods
Author
Ray Amjad
Type
Guard & safety mods
License
MIT
Last updated
30 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-box?

Claude can use a secret without seeing it: a masked box saves keys to .env and gives Claude a placeholder, every key a tool prints comes back as a placeholder, and committing .env is refused It is a mod for Claude Code, from ray-amjad/claude-code-mods on GitHub.

What can the secret-box mod access?

Its widest reach is "writes or runs" (runs processes, writes files, drives Claude, reads files, reads env vars, draws). It sees every prompt, every tool call, the system prompt, subagent spawns, Bash calls, /"^(Bash|Read|Grep|Edit|MultiEdit|NotebookEdit)$"/ calls, mcp__secret-box__request_secret calls. It draws in Pane, AbovePrompt. Like any mod, it runs with your permissions.

How do I install secret-box?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add ray-amjad/claude-code-mods and then /plugin install secret-box@claude-code-mods.

Is secret-box popular?

ray-amjad/claude-code-mods has 101 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 30 October 2026.

More guard & safety mods

vibeclaude

161

transkatgirl/vibeclaude

Feel every Claude Code lifecycle event through Intiface Central / buttplug.io. Streaming output, edits, tool results, permission prompts and turn completion are mapped to vibration pulses.

Guard & safety mods/plugin install

transcript-redactor

101

ray-amjad/claude-code-mods

Keeps secrets and email addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call

Guard & safety mods/plugin install

flightdeck

216

scasella/claude-flightdeck

Flightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt and a session log, all from real session events

Guard & safety mods/plugin install

tool-lines

83

Tickloop/claude-mods

Draws each tool call as one compact 'tool_call: Tool(input) - meta' line and hides its result block

Guard & safety mods/plugin install

secrets-veil

300

yonatangross/orchestkit

Masks secret values in tool results before the model reads them: named vendor variables, value-shape patterns, and high-entropy tokens. No reveal path.

Guard & safety mods

so-hud

52

Kanevry/session-orchestrator

See Session Orchestrator status, warnings and session beacons in Claude Code ($.so contract v1), with protection gates for secret-printing commands, rule traps, outward actions and scope collisions.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.