Claude Code mod

secret-mask

Redacts tokens, API keys and passwords from every row that enters the conversation (tool results, hook context, input, replies) before it is stored. The secret never reaches the model or the transcript.

Guard & safety modsValidates on Claude Code 2.1.319 Source

Install

From source
git clone https://github.com/chami1221-eng/my-ai-workbench.git
claude --plugin-dir ./my-ai-workbench/mods/secret-mask

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L0Draws and remembers: draws
Sees
Bash calls
Hooks
session.startsession.appendtool.callcommand.run

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
chami1221-eng/my-ai-workbench
Folder
mods/secret-mask
Type
Guard & safety mods
License
Apache-2.0
Last updated
15 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-mask?

Redacts tokens, API keys and passwords from every row that enters the conversation (tool results, hook context, input, replies) before it is stored. The secret never reaches the model or the transcript. It is a mod for Claude Code, from chami1221-eng/my-ai-workbench on GitHub.

What can the secret-mask mod access?

Its widest reach is "draws and remembers" (draws). It sees Bash calls. Like any mod, it runs with your permissions.

How do I install secret-mask?

Clone chami1221-eng/my-ai-workbench and start Claude Code with --plugin-dir pointing at the mod's folder (mods/secret-mask).

More guard & safety mods

secret-guard

blackironj/claude-mods

Block Bash access to .env and Claude config files; mask tokens and keys in Bash and Read output

Guard & safety mods/plugin install

session-deck

cloudcruncher/claude-mod-garage

See and message your other live Claude sessions (/live, /sessions, /tell), confirm risky shell commands, chime after long turns.

Guard & safety mods/plugin install

ringtones

UsamaSadiq/claude-mods

Short synthesized chimes when a long turn finishes, a call is blocked, a turn fails or you ship

Guard & safety mods/plugin install

slopless

0xGondarxyz/claude-code-mods

Blocks AI sounding text in social media writing (X replies, X posts, LinkedIn posts) and injects the writing rules.

Guard & safety mods/plugin install

repo-guard

YuehengHan/my-claude-mods

Blocks destructive git commands and asks before Claude first edits a repo other than the session's own

Guard & safety mods

loop-guard

12

VedantAndhale/claude-pro-kit

Holds back a shell command once when the exact same command already failed twice in a row, and tells Claude to change approach; retrying it still goes through.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.