Claude Code mod
secret-mod
Ask for credentials in a form, keep them in the macOS keychain, and run commands with them without showing the values to Claude
Install
/plugin marketplace add zyx1121/secret-mod
/plugin install secret-mod@secret-modMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, drives Claude, reads mod state, persists state, draws
- Sees
- mcp__secret-mod__ask calls, mcp__secret-mod__delete calls, mcp__secret-mod__list calls, mcp__secret-mod__run calls
- Draws in
AbovePrompt- Hooks
session.starttool.callui.render
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- zyx1121/secret-mod
- Folder
.- Marketplace
secret-mod- Author
- zyx1121
- License
- MIT
- Last updated
- 17 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-mod?
Ask for credentials in a form, keep them in the macOS keychain, and run commands with them without showing the values to Claude It is a mod for Claude Code, from zyx1121/secret-mod on GitHub.
What can the secret-mod mod access?
Its widest reach is "writes or runs" (runs processes, drives Claude, reads mod state, persists state, draws). It sees mcp__secret-mod__ask calls, mcp__secret-mod__delete calls, mcp__secret-mod__list calls, mcp__secret-mod__run calls. It draws in AbovePrompt. Like any mod, it runs with your permissions.
How do I install secret-mod?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add zyx1121/secret-mod and then /plugin install secret-mod@secret-mod.
More guard & safety mods
secret-mask
mashabek/claude-mods
Masks secrets (API keys, tokens, passwords, .env values) in tool output and prompts before Claude reads them
secret-redactor
jidhra/claude-mods
Keeps secrets, email addresses and IP addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call
secret-guard
verastack-labs/secret-guard
Blocks API keys, tokens and private keys from being written to disk, put on a command line, or committed to git by Claude.
secret-sentry
ccdwyer/secret-sentry
Two-way secret scrubbing: redacts credentials before the model sees them and blocks writing them into tracked files or shell commands
secret-guard
tksunw/secret-guard
Blocks git commit and git push from Claude when the change carries a secret file or a credential-shaped line, and flags secret files that are not gitignored
secret-vault
gcamara/secret-vault
Collects API keys and other secrets in a private modal and writes them straight to their target file, redacting them from the session.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.