Claude Code mod
secret-guard
Hides secrets in tool results before Claude reads them: the secret values of every .env and .env.* from your session's folder up to the drive root, and anything that looks like a secret (KEY=VALUE under a secret name, passwords in URLs, private keys, JWTs, AWS keys, Kubernetes Secrets); tells Claude how to use them without printing them
Install
/plugin marketplace add vumichien/claude-code-mods-kit
/plugin install secret-guard@chien-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads files, reads env vars, persists state, draws
- Sees
- the system prompt, every tool call
- Hooks
session.startprompt.contextcommand.runtool.callprompt.attachmentsession.send
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- vumichien/claude-code-mods-kit
- Folder
plugins/secret-guard- Marketplace
chien-mods- Author
- Chien Vu Minh
- License
- MIT
- Last updated
- 10 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-guard?
Hides secrets in tool results before Claude reads them: the secret values of every .env and .env.* from your session's folder up to the drive root, and anything that looks like a secret (KEY=VALUE under a secret name, passwords in URLs, private keys, JWTs, AWS keys, Kubernetes Secrets); tells Claude how to use them without printing them It is a mod for Claude Code, from vumichien/claude-code-mods-kit on GitHub.
What can the secret-guard mod access?
Its widest reach is "reads" (reads files, reads env vars, persists state, draws). It sees the system prompt, every tool call. Like any mod, it runs with your permissions.
How do I install secret-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add vumichien/claude-code-mods-kit and then /plugin install secret-guard@chien-mods.
Is secret-guard popular?
vumichien/claude-code-mods-kit has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 10 October 2026.
More guard & safety mods
redact-restore
3isandrel/redact-restore
Reversible redaction for Claude Code: private values are replaced with placeholders before the model API sees them and restored locally. No API gateway.
vault
3yocloud-code/claude-vault
Credential vault for Claude Code: macOS Keychain secrets, per-directory grants, injected env, redacted output, pane with import/export
receipt
3yash-gadodia/claude-mods
Keeps a per-turn tally of edits, runs, curls and destructive commands and shows it on the turn footer; a claim with no run flags the spinner, a destructive Bash unfolds its tool group, and an edit-without-run turn suggests running the tests.
waiting-bell
3ibrahimkobeissy/claude-mods
Rings a bell and shows a banner whenever Claude is blocked waiting for you, repeating every 5 minutes until you answer
peek
3alex2481kobe/claude-mods
Images in the terminal: Claude shows the pictures it makes or finds inline, as real pixels in kitty and Ghostty and as a colored-block preview elsewhere
auto-approve
2llkhacquan/claude-mods
Answers permission prompts for you: regex layers allow routine tool calls and always ask on pushes to protected branches, and haiku judges the rest against your plain-text rules. Offers a rule after you approve the same kind of call twice, and logs every decision so /auto-approve learn can suggest more
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.