Claude Code mod

secret-redact

Masks passwords, keys, salts and tokens in tool outputs (Read, Bash, any tool_result) before Claude reads them. WordPress-aware.

Guard & safety mods Plugin marketplaceValidates on Claude Code 2.1.322 Source

Install

Inside Claude Code
/plugin marketplace add samykantari/secret-redact
/plugin install secret-redact@secret-redact

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L1Reads: reads files, reads env vars, draws
Sees
Read calls, Bash calls
Hooks
session.startcommand.runtool.callsession.append

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
samykantari/secret-redact
Folder
.
Marketplace
secret-redact
Author
Samy Kantari
Type
Guard & safety mods
License
MIT
Last updated
15 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-redact?

Masks passwords, keys, salts and tokens in tool outputs (Read, Bash, any tool_result) before Claude reads them. WordPress-aware. It is a mod for Claude Code, from samykantari/secret-redact on GitHub.

What can the secret-redact mod access?

Its widest reach is "reads" (reads files, reads env vars, draws). It sees Read calls, Bash calls. Like any mod, it runs with your permissions.

How do I install secret-redact?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add samykantari/secret-redact and then /plugin install secret-redact@secret-redact.

More guard & safety mods

secret-mod

zyx1121/secret-mod

Ask for credentials in a form, keep them in the macOS keychain, and run commands with them without showing the values to Claude

Guard & safety mods/plugin install

secret-sentry

ccdwyer/secret-sentry

Two-way secret scrubbing: redacts credentials before the model sees them and blocks writing them into tracked files or shell commands

Guard & safety mods

secret-mask

mashabek/claude-mods

Masks secrets (API keys, tokens, passwords, .env values) in tool output and prompts before Claude reads them

Guard & safety mods/plugin install

secret-vault

gcamara/secret-vault

Collects API keys and other secrets in a private modal and writes them straight to their target file, redacting them from the session.

Guard & safety mods/plugin install

secret-guard

verastack-labs/secret-guard

Blocks API keys, tokens and private keys from being written to disk, put on a command line, or committed to git by Claude.

Guard & safety mods/plugin install

secrets-redactor

lakmadev/claude-mods

Scrubs API keys, tokens and private keys from prompts and tool output before the model sees them.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.