Claude Code mod

secret-scan

Adds /secret-scan: tracked files and line numbers that hold secret-shaped text, found with git grep. Never prints a matched value. Read-only. Copies the result to your clipboard.

3 starsGuard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add baselane-sh/mods
/plugin install secret-scan@baselane-mods-dev

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L2Writes or runs: runs processes, writes the clipboard, reads mod state, draws
Sees
every tool call
Draws in
CommandOutput
Hooks
tool.callsession.endsession.startui.rendercommand.run

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
baselane-sh/mods
Folder
plugins/secret-scan
Marketplace
baselane-mods-dev
Author
Baselane
Type
Guard & safety mods
License
MIT
Last updated
6 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-scan?

Adds /secret-scan: tracked files and line numbers that hold secret-shaped text, found with git grep. Never prints a matched value. Read-only. Copies the result to your clipboard. It is a mod for Claude Code, from baselane-sh/mods on GitHub.

What can the secret-scan mod access?

Its widest reach is "writes or runs" (runs processes, writes the clipboard, reads mod state, draws). It sees every tool call. It draws in CommandOutput. Like any mod, it runs with your permissions.

How do I install secret-scan?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add baselane-sh/mods and then /plugin install secret-scan@baselane-mods-dev.

Is secret-scan popular?

baselane-sh/mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 6 October 2026.

More guard & safety mods

secret-output-guard

3

baselane-sh/mods

Tells Claude not to repeat a credential that showed up in command or file output, and names the source to rotate.

Guard & safety mods/plugin install

secret-shield

3

Plagemes/claude-mods

Blocks edits and writes that would commit API keys, tokens or private keys.

Guard & safety mods/plugin install

secret-guard

3

baselane-sh/mods

Asks before a live API key, token or private key is written, edited or run.

Guard & safety mods/plugin install

security-mode

3

baselane-sh/mods

Checks each change for injection, secrets, authorization and unsafe input, and states the risks it checked.

Guard & safety mods/plugin install

secret-filename-guard

3

baselane-sh/mods

Asks before a Bash command touches a secret-looking file (.env, private keys, credentials).

Guard & safety mods/plugin install

seed-guard

3

Plagemes/claude-mods

Blocks database seed, reset and drop commands unless DATABASE_URL points at your own machine.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.