Claude Code mod

secret-guard

Holds back a prompt that looks like it carries a secret (API keys, tokens, access-key pairs, private keys, passwords) before it reaches the transcript, puts it back in the box, and offers to save the secret as an env var in ~/.zshrc and send $NAME instead. No model calls.

2 starsGuard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source
git clone https://github.com/joeldg/claude-mods.git
claude --plugin-dir ./claude-mods/secret-guard

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L2Writes or runs: writes files, writes the prompt box, reads files, reads env vars, reads mod state, draws
Sees
every prompt
Draws in
AbovePrompt
Hooks
session.startprompt.submitsession.appendcommand.runui.render

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Folder
secret-guard
Author
joeldg
Last updated
16 October 2026

FAQ

What is secret-guard?

Holds back a prompt that looks like it carries a secret (API keys, tokens, access-key pairs, private keys, passwords) before it reaches the transcript, puts it back in the box, and offers to save the secret as an env var in ~/.zshrc and send $NAME instead. No model calls. It is a mod for Claude Code, from joeldg/claude-mods on GitHub.

What can the secret-guard mod access?

Its widest reach is "writes or runs" (writes files, writes the prompt box, reads files, reads env vars, reads mod state, draws). It sees every prompt. It draws in AbovePrompt. Like any mod, it runs with your permissions.

How do I install secret-guard?

Clone joeldg/claude-mods and start Claude Code with --plugin-dir pointing at the mod's folder (secret-guard).

Is secret-guard popular?

joeldg/claude-mods has 2 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 16 October 2026.

More guard & safety mods

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.