Claude Code mod

secret-guard

Stops Claude from reading or editing .env files, private keys and credential files, including through symlinks and shell commands

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add Sajid-Rahman0126/claude-studio-mods
/plugin install secret-guard@claude-studio-mods

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L1Reads: reads files, draws
Sees
Read calls, Edit calls, Write calls, Bash calls
Hooks
tool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
Sajid-Rahman0126/claude-studio-mods
Folder
mods/secret-guard
Marketplace
claude-studio-mods
Author
Sajid Rahman
Type
Guard & safety mods
License
MIT
Last updated
9 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-guard?

Stops Claude from reading or editing .env files, private keys and credential files, including through symlinks and shell commands It is a mod for Claude Code, from Sajid-Rahman0126/claude-studio-mods on GitHub.

What can the secret-guard mod access?

Its widest reach is "reads" (reads files, draws). It sees Read calls, Edit calls, Write calls, Bash calls. Like any mod, it runs with your permissions.

How do I install secret-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Sajid-Rahman0126/claude-studio-mods and then /plugin install secret-guard@claude-studio-mods.

More guard & safety mods

secret-guard

nicolas-fer/secret-guard

Bloqueia prompts e saídas de ferramentas que contenham chaves/segredos antes de chegarem ao modelo

Guard & safety mods/plugin install

secret-guard

tksunw/secret-guard

Blocks git commit and git push from Claude when the change carries a secret file or a credential-shaped line, and flags secret files that are not gitignored

Guard & safety mods

secret-guard

hagaybar/claude-secret-guard

Keeps API keys, tokens and passwords out of the transcript, tool output, files, commits, PRs and issues.

Guard & safety mods/plugin install

secret-guard

verastack-labs/secret-guard

Blocks API keys, tokens and private keys from being written to disk, put on a command line, or committed to git by Claude.

Guard & safety mods/plugin install

secret-guard

davidho27941/cockpit

Keeps API keys, cloud credentials and other secrets out of what is sent to the model: every text that enters the conversation is scanned and each match is replaced with a meaningful placeholder such as <google api key>.

Guard & safety mods/plugin install

secret-mask

mashabek/claude-mods

Masks secrets (API keys, tokens, passwords, .env values) in tool output and prompts before Claude reads them

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.