Claude Code mod
secret-entry
Lets Claude write files that contain secrets: the write holds, you paste each value into a masked prompt, and the values never enter the chat.
Install
/plugin marketplace add ravnhq/ravn-core
/plugin install secret-entry@ravnMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, writes files, drives Claude, reads files, reads mod state, draws
- Sees
- Write|Edit calls, mcp__secret-entry__write calls
- Draws in
PaneAbovePrompt- Hooks
session.starttool.callcommand.runui.closeui.render
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- ravnhq/ravn-core
- Folder
plugins/mods/secret-entry- Marketplace
ravn- Author
- Ravn AI Enablement Team
- License
- MIT
- Last updated
- 11 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-entry?
Lets Claude write files that contain secrets: the write holds, you paste each value into a masked prompt, and the values never enter the chat. It is a mod for Claude Code, from ravnhq/ravn-core on GitHub.
What can the secret-entry mod access?
Its widest reach is "writes or runs" (runs processes, writes files, drives Claude, reads files, reads mod state, draws). It sees Write|Edit calls, mcp__secret-entry__write calls. It draws in Pane, AbovePrompt. Like any mod, it runs with your permissions.
How do I install secret-entry?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add ravnhq/ravn-core and then /plugin install secret-entry@ravn.
Is secret-entry popular?
ravnhq/ravn-core has 2 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 11 November 2026.
More guard & safety mods
secret-drop
2aislam23/secret-drop
Secure input window for API keys and passwords: Claude asks, you type into a masked field, the mod writes .env / GitHub Secrets itself. The value never enters the chat.
secret-scrub
2funkadelic/claude-secret-scrub
Redacts tokens, keys and passwords from tool results before they reach the model or the session transcript
redact
2karanb192/claude-code-redact
Redacts secrets and PII from every row Claude Code stores, before the model reads it and before the transcript keeps it. Reach L0: no network, no processes, no files.
shroud
2revenantworks/claude-skills
Revenantworks shroud mod for Claude Code 2.1.287+: masks secrets (its own shapes plus the gitleaks rule set), stream keys and, if you turn them on, personal data and your own word list before Claude reads them (restoring a value only into the gitignored file it came from), flags a credential keywarden marked for rotation, and marks web, MCP and mail results and messages from routines or other sessions as data. Kept apart from the vigil plugin, so safety never depends on the dashboard. Never blocks your work; keeps no record; contacts no service.
rate-limit-guard
2sciccolella/claude-ratelimit-mod
At 90% of the 5-hour limit, tells the orchestrator and every subagent to checkpoint and stop at a safe point, then resumes them after the window resets.
tamirs-superpowers-guard
2Tamircohen28/tamirs-superpowers
In-process guard for tamirs-superpowers: holds a destructive shell command (force push, rm -rf, git reset --hard, ...) until you answer Proceed or Cancel, and refuses a file write in the main checkout while an orchestration objective is active. Companion to the core plugin; Claude Code and Claude Desktop only.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.