Claude Code mod
secret-output-guard
Tells Claude not to repeat a credential that showed up in command or file output, and names the source to rotate.
Install
/plugin marketplace add baselane-sh/mods
/plugin install secret-output-guard@baselane-mods-devMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers
- Sees
- classic hooks, every tool call
- Hooks
classic.PreToolUsetool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- baselane-sh/mods
- Folder
plugins/secret-output-guard- Marketplace
baselane-mods-dev- Author
- Baselane
- License
- MIT
- Last updated
- 6 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-output-guard?
Tells Claude not to repeat a credential that showed up in command or file output, and names the source to rotate. It is a mod for Claude Code, from baselane-sh/mods on GitHub.
What can the secret-output-guard mod access?
Its widest reach is "draws and remembers". It sees classic hooks, every tool call. Like any mod, it runs with your permissions.
How do I install secret-output-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add baselane-sh/mods and then /plugin install secret-output-guard@baselane-mods-dev.
Is secret-output-guard popular?
baselane-sh/mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 6 October 2026.
More guard & safety mods
secret-guard
3baselane-sh/mods
Asks before a live API key, token or private key is written, edited or run.
secret-scan
3baselane-sh/mods
Adds /secret-scan: tracked files and line numbers that hold secret-shaped text, found with git grep. Never prints a matched value. Read-only. Copies the result to your clipboard.
secret-filename-guard
3baselane-sh/mods
Asks before a Bash command touches a secret-looking file (.env, private keys, credentials).
secret-shield
3Plagemes/claude-mods
Blocks edits and writes that would commit API keys, tokens or private keys.
secret-commit-guard
3baselane-sh/mods
Asks before a git commit that would record a credential or a secret-named file. Reads the staged diff with git.
security-mode
3baselane-sh/mods
Checks each change for injection, secrets, authorization and unsafe input, and states the risks it checked.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.