Claude Code mod
secret-redactor
Masks API keys, tokens, private keys and password assignments in tool results before the model sees them.
Install
/plugin marketplace add oleksandrkodua/qa-mods
/plugin install secret-redactor@qa-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers
- Sees
- every tool call
- Hooks
tool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- oleksandrkodua/qa-mods
- Folder
secret-redactor- Marketplace
qa-mods- Author
- noaod
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-redactor?
Masks API keys, tokens, private keys and password assignments in tool results before the model sees them. It is a mod for Claude Code, from oleksandrkodua/qa-mods on GitHub.
What can the secret-redactor mod access?
Its widest reach is "draws and remembers". It sees every tool call. Like any mod, it runs with your permissions.
How do I install secret-redactor?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add oleksandrkodua/qa-mods and then /plugin install secret-redactor@qa-mods.
More guard & safety mods
env-protect
vincentlauriat/ModsTools
Asks the user before Claude reads secret files (.env, private keys, .netrc, .npmrc, .aws/credentials, keychains…) with Read, Grep, Glob or Bash
reply-size
1MatheusChiodi/cockpit
Under a long reply block, shows its word count and how many code blocks it holds, so you can decide whether to read it now
guardian
3Plagemes/claude-mods
One security policy for every guard mod — permissive, standard or strict — plus a project safety score.
debug-flag-guard
1MatheusChiodi/cockpit
Asks before an edit leaves a debug flag on, exposes every actuator endpoint or sets development mode in a production file
oracle-paging-guard
1MatheusChiodi/cockpit
Refuses an edit that adds FETCH FIRST, OFFSET ROWS or LIMIT to SQL, which Oracle 11g cannot run, and names the ROWNUM form
a11y-guard
3Plagemes/claude-mods
Flags accessibility misses as Claude writes UI: images without alt, unlabeled buttons, clickable divs.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.