Claude Code mod

secret-guard

金鑰守門：遮蔽 prompt 和工具輸出裡的 API key，並擋下讀寫 .env、私鑰這類檔案；/guard 看狀態

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code

/plugin marketplace add builtbyjia/claude-code-mods
/plugin install secret-guard@builtbyjia-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach: L0Draws and remembers: draws
Sees: every prompt, Read calls, Edit calls, Write calls, Grep calls, Bash calls
Hooks: session.startcommand.runprompt.submitsession.appendtool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.

Claude Code docs

Details

Repository: builtbyjia/claude-code-mods
Folder: secret-guard
Marketplace: builtbyjia-mods
Author: Ting Jia
Type: Guard & safety mods
License: MIT
Last updated: 7 October 2026
Listed in: awesome-claude-code-mods

FAQ

What is secret-guard?

金鑰守門：遮蔽 prompt 和工具輸出裡的 API key，並擋下讀寫 .env、私鑰這類檔案；/guard 看狀態 It is a mod for Claude Code, from builtbyjia/claude-code-mods on GitHub.

What can the secret-guard mod access?

Its widest reach is "draws and remembers" (draws). It sees every prompt, Read calls, Edit calls, Write calls, Grep calls, Bash calls. Like any mod, it runs with your permissions.

How do I install secret-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add builtbyjia/claude-code-mods and then /plugin install secret-guard@builtbyjia-mods.

More guard & safety mods

flightdeck

216

scasella/claude-flightdeck

Flightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt and a session log, all from real session events

Guard & safety mods/plugin install

vibeclaude

161

transkatgirl/vibeclaude

Feel every Claude Code lifecycle event through Intiface Central / buttplug.io. Streaming output, edits, tool results, permission prompts and turn completion are mapped to vibration pulses.

Guard & safety mods/plugin install

secret-box

101

ray-amjad/claude-code-mods

Claude can use a secret without seeing it: a masked box saves keys to .env and gives Claude a placeholder, every key a tool prints comes back as a placeholder, and committing .env is refused

Guard & safety mods/plugin install

transcript-redactor

101

ray-amjad/claude-code-mods

Keeps secrets and email addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call

Guard & safety mods/plugin install

tool-lines

Tickloop/claude-mods

Draws each tool call as one compact 'tool_call: Tool(input) - meta' line and hides its result block

Guard & safety mods/plugin install

so-hud

Kanevry/session-orchestrator

See Session Orchestrator status, warnings and session beacons in Claude Code ($.so contract v1), with protection gates for secret-printing commands, rule traps, outward actions and scope collisions.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.