Claude Code mod
secret-scrubber
Redacts API keys, tokens, private keys and .env secrets from tool output before the transcript stores it and before the model reads it.
Install
/plugin marketplace add TroyJLorents-GH/mod-squad
/plugin install secret-scrubber@mod-squadMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads mod state, draws
- Hooks
session.startsession.appendcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- TroyJLorents-GH/mod-squad
- Folder
mods/secret-scrubber- Marketplace
mod-squad- Author
- Troy Lorents
- License
- MIT
- Last updated
- 21 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-scrubber?
Redacts API keys, tokens, private keys and .env secrets from tool output before the transcript stores it and before the model reads it. It is a mod for Claude Code, from TroyJLorents-GH/mod-squad on GitHub.
What can the secret-scrubber mod access?
Its widest reach is "reads" (reads mod state, draws). Like any mod, it runs with your permissions.
How do I install secret-scrubber?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add TroyJLorents-GH/mod-squad and then /plugin install secret-scrubber@mod-squad.
Is secret-scrubber popular?
TroyJLorents-GH/mod-squad has 1 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 21 October 2026.
More guard & safety mods
secret-guard
1Justmalhar/awesome-claude-mods
Blocks Write, Edit and Bash calls that would put an API key, token or private key into a file or command.
jev
2mako-code/gobworks
Jev (TypeSafe's System One model) as Claude's instant co-processor: bulk filter/classify/rank/semantic-grep tools, risk notes under permission dialogs, a check on unverified 'it passes' claims, and optional per-prompt effort.
pm-guard
1MatheusChiodi/cockpit
Refuses npm, pnpm, yarn or bun commands that use a different package manager than the project's lockfile, and names the right one
dot
lucasleandro08/claude-mods
An always-on assistant with a name and a face: give it goals, and it keeps working on them in background rounds, asks before risky actions, briefs you in the morning and pings you when it needs a decision.
lk-secret-guard
1connectwithub/loopkeeper
A seatbelt for secrets: stops credential-shaped strings and your private deny-list of words before Claude writes them into files or shell commands.
guardiao
juniormartinxo/jm-claude-mods
Veta ações perigosas do agente: ler arquivos de segredo (.env, chaves), rm -rf na raiz, push --force, reset --hard, DROP TABLE
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.