Claude Code mod

secret-guard

Keeps secrets out of Claude's context: gitleaks scans every tool output, prompt and attachment before the model reads it, and you decide what the model sees.

1 starsGuard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code

/plugin marketplace add legostin/claude-code-secret-guard
/plugin install secret-guard@secret-guard

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach: L2Writes or runs: runs processes, writes the prompt box, reads files, reads env vars, reads mod state, persists state, draws
Sees: every tool call, every prompt, the system prompt
Draws in: Pane
Hooks: session.startcommand.runui.renderprompt.composetool.callsession.appendprompt.submitprompt.mentionprompt.attachmentprompt.context

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.

Claude Code docs

Details

Repository: legostin/claude-code-secret-guard
Folder: .
Marketplace: secret-guard
Author: Legostin Vyacheslav
Type: Guard & safety mods
Website: legostin.github.io/claude-code-secret-guard
License: MIT
Last updated: 7 October 2026
Listed in: awesome-claude-code-mods

FAQ

What is secret-guard?

Keeps secrets out of Claude's context: gitleaks scans every tool output, prompt and attachment before the model reads it, and you decide what the model sees. It is a mod for Claude Code, from legostin/claude-code-secret-guard on GitHub.

What can the secret-guard mod access?

Its widest reach is "writes or runs" (runs processes, writes the prompt box, reads files, reads env vars, reads mod state, persists state, draws). It sees every tool call, every prompt, the system prompt. It draws in Pane. Like any mod, it runs with your permissions.

How do I install secret-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add legostin/claude-code-secret-guard and then /plugin install secret-guard@secret-guard.

Is secret-guard popular?

legostin/claude-code-secret-guard has 1 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 7 October 2026.

More guard & safety mods

scope-cop

candygoogy/notary

Claude stays inside the scope you set, and asks before leaving it. Edits outside it are flagged, or blocked if you want.

Guard & safety mods/plugin install

secret-mask

Fazzani/claude-mods

Masks secrets (API keys, tokens, passwords, private keys) in the transcript; hover a masked value to reveal it.

Guard & safety mods/plugin install

read-guard

LupusMalusDeviant/mod-box

Holds a whole-file Read (no offset/limit) of a file above the limit, a lockfile, minified code or a source map, and the same via cat, type or Get-Content in the shell; tells Claude the size, a token estimate and a better way (Grep, offset/limit). A second try at the same file goes through, and so does a Read with allow_large. Claude Code itself stops only at about 25,000 tokens.

Guard & safety mods/plugin install

secrets

crockalet/claude-mods

Hand Claude an API token without it reading the value: you type it into a field above the prompt, Claude uses it in Bash as $NAME, and it is redacted from every tool result.

Guard & safety mods/plugin install

notch-hud

skuvshin0v/notch-hud

A Dynamic Island-style HUD around the MacBook notch for Claude Code: session progress at a glance, answer questions and permission requests without going back to the terminal. macOS 15+ on Apple Silicon.

Guard & safety mods/plugin install

secrets

falkoro/claude-code-secrets

Claude asks for API keys in a masked field above the prompt, saves them to the macOS Keychain, Linux keyring or Windows DPAPI, and uses them in Bash without ever seeing them

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.