Claude Code mod
secret-box
Resolves {{secret:NAME}} placeholders from Linux Secret Service or macOS Keychain at execution time, with optional directory scopes and host-specific output scrubbing.
Install
/plugin marketplace add iuliandita/mods
/plugin install secret-box@iuliandita-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, writes files, reads files, draws
- Sees
- Bash calls
- Hooks
session.startcommand.runtool.callsession.appendsession.send
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- iuliandita/mods
- Folder
mods/secret-box/claude- Marketplace
iuliandita-mods- Author
- iuliandita
- License
- MIT
- Last updated
- 29 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-box?
Resolves {{secret:NAME}} placeholders from Linux Secret Service or macOS Keychain at execution time, with optional directory scopes and host-specific output scrubbing. It is a mod for Claude Code, from iuliandita/mods on GitHub.
What can the secret-box mod access?
Its widest reach is "writes or runs" (runs processes, writes files, reads files, draws). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install secret-box?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add iuliandita/mods and then /plugin install secret-box@iuliandita-mods.
Is secret-box popular?
iuliandita/mods has 2 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 29 October 2026.
More guard & safety mods
probe2
24ucsandman/Agnostic-AI
Interception probe: deny, rewrite, replace result, delay, throw, register tool, classify
secret-guard
2ShriD5/claude-mods
Stops Claude from writing API keys, tokens, private keys and database passwords into files.
dash-guard
6mutlumehmet/claude-plugins
Refuses prose that Claude writes with an em dash, an en dash or a double hyphen, and tells Claude which lines to rewrite
rainbow-prompt
1Broo37/claude-mods
Colors the prompt box as you type: ticket ids, paths, links, rainbow words, and a red warning on anything that looks like a secret
guard-devops
3baselane-sh/mods
Asks before harsh DevOps commands: destructive Docker, Kubernetes and Helm calls, CI config edits, broad chmod and chown, and git commands that lose work. Add infra-guard for plain kubectl delete.
sensitive-file-guard
1Justmalhar/awesome-claude-mods
Blocks Read, Write, Edit, Grep, Glob and Bash calls that touch .env files, private keys and credential stores.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.