Claude Code mod
secret-pane
Claude asks for a secret in a masked box and gets a placeholder: the value stays in the session's memory, becomes real only inside a Bash command, is hidden again in every Bash and Read result and in the prompt, and never reaches the transcript; the mod writes nothing to disk
Install
git clone https://github.com/bengous/claude-code-plugins.git
claude --plugin-dir ./claude-code-plugins/secret-paneThe repo has no marketplace file, so load the plugin folder directly with --plugin-dir.
What it can access
- Reach
- L2Writes or runs: runs processes, drives Claude, reads files, reads env vars, draws
- Sees
- mcp__secret-pane__request_secret calls, Write|Edit|NotebookEdit calls, Bash|Read|Write|Edit|NotebookEdit|Monitor|GetTask|LSP calls, every prompt
- Draws in
PaneAbovePrompt- Hooks
session.startsession.endtool.callui.renderui.closetool.checksession.appendprompt.submit
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- bengous/claude-code-plugins
- Folder
secret-pane- Author
- Augustin BENGOLEA
- License
- MIT
- Last updated
- 1 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-pane?
Claude asks for a secret in a masked box and gets a placeholder: the value stays in the session's memory, becomes real only inside a Bash command, is hidden again in every Bash and Read result and in the prompt, and never reaches the transcript; the mod writes nothing to disk It is a mod for Claude Code, from bengous/claude-code-plugins on GitHub.
What can the secret-pane mod access?
Its widest reach is "writes or runs" (runs processes, drives Claude, reads files, reads env vars, draws). It sees mcp__secret-pane__request_secret calls, Write|Edit|NotebookEdit calls, Bash|Read|Write|Edit|NotebookEdit|Monitor|GetTask|LSP calls, every prompt. It draws in Pane, AbovePrompt. Like any mod, it runs with your permissions.
How do I install secret-pane?
Clone bengous/claude-code-plugins and start Claude Code with --plugin-dir pointing at the mod's folder (secret-pane).
Is secret-pane popular?
bengous/claude-code-plugins has 6 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 1 November 2026.
More guard & safety mods
unity-tools
1kevinmedeiros/claude-mods
Unity no Claude Code: erros de compilação no contexto, painel de testes, build do servidor e guardas de arquivos
probe3
24ucsandman/Agnostic-AI
Permission override, subagent visibility, agent.spawn model rewrite, turn.step routing, prompt context injection
safety-net
1TroyJLorents-GH/mod-squad
Blocks destructive tool calls before they run (force pushes, rm -rf outside the project, DROP TABLE, terraform destroy, writes to .env and keys, ...) and explains why.
guardrails
8arasovic/claude-code-mods
Blocks shell commands you pick in /config: Cloudflare cf writes, attribution lines in commits and PRs, claude/ branch names. All rules start off
push-guard
1finalpantasy/claude-mod-pack
Claude Push Guard: stops a git push Claude runs when the commits would publish your name, email, home folder path or other words you list, and says exactly where they are.
reread-guard
12VedantAndhale/claude-pro-kit
Stops Claude re-reading a file it already read in this conversation, with Read or a plain cat, sed -n, head, tail or Get-Content, when the file has not changed since; a deliberate second attempt still goes through.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.