Claude Code mod

secret-guard

Block Bash access to .env and Claude config files; mask tokens and keys in Bash and Read output

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.319 Source

Install

Inside Claude Code

/plugin marketplace add blackironj/claude-mods
/plugin install secret-guard@blackironj-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach: L0Draws and remembers: draws
Sees: Bash calls, Read calls
Hooks: tool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.

Claude Code docs

Details

Repository: blackironj/claude-mods
Folder: secret-guard
Marketplace: blackironj-mods
Author: blackironj
Type: Guard & safety mods
License: MIT
Last updated: 21 October 2026
Listed in: awesome-claude-code-mods

FAQ

What is secret-guard?

Block Bash access to .env and Claude config files; mask tokens and keys in Bash and Read output It is a mod for Claude Code, from blackironj/claude-mods on GitHub.

What can the secret-guard mod access?

Its widest reach is "draws and remembers" (draws). It sees Bash calls, Read calls. Like any mod, it runs with your permissions.

How do I install secret-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add blackironj/claude-mods and then /plugin install secret-guard@blackironj-mods.

More guard & safety mods

ringtones

UsamaSadiq/claude-mods

Short synthesized chimes when a long turn finishes, a call is blocked, a turn fails or you ship

Guard & safety mods/plugin install

session-deck

cloudcruncher/claude-mod-garage

See and message your other live Claude sessions (/live, /sessions, /tell), confirm risky shell commands, chime after long turns.

Guard & safety mods/plugin install

repo-guard

YuehengHan/my-claude-mods

Blocks destructive git commands and asks before Claude first edits a repo other than the session's own

Guard & safety mods

slopless

0xGondarxyz/claude-code-mods

Blocks AI sounding text in social media writing (X replies, X posts, LinkedIn posts) and injects the writing rules.

Guard & safety mods/plugin install

keymaster

davidcoulson/crab-workshop

Secret tripwire: masks API keys, tokens, passwords and private keys in tool output before Claude, the transcript or your screen sees them, says so in a toast, and counts saves in the status line. /keymaster lists what was masked (kind and place, never the value).

Guard & safety mods/plugin install

loop-guard

VedantAndhale/claude-pro-kit

Holds back a shell command once when the exact same command already failed twice in a row, and tells Claude to change approach; retrying it still goes through.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.