Claude Code mod

secret-sentry

Two-way secret scrubbing: redacts credentials before the model sees them and blocks writing them into tracked files or shell commands

Guard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source
git clone https://github.com/ccdwyer/secret-sentry.git
claude --plugin-dir ./secret-sentry/.

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L2Writes or runs: runs processes, reads files, reads mod state, draws
Sees
every prompt, every tool call
Hooks
prompt.submitsession.appendtool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
ccdwyer/secret-sentry
Folder
.
Author
Chris Dwyer
Type
Guard & safety mods
License
MIT
Last updated
2 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-sentry?

Two-way secret scrubbing: redacts credentials before the model sees them and blocks writing them into tracked files or shell commands It is a mod for Claude Code, from ccdwyer/secret-sentry on GitHub.

What can the secret-sentry mod access?

Its widest reach is "writes or runs" (runs processes, reads files, reads mod state, draws). It sees every prompt, every tool call. Like any mod, it runs with your permissions.

How do I install secret-sentry?

Clone ccdwyer/secret-sentry and start Claude Code with --plugin-dir pointing at the mod's folder (.).

More guard & safety mods

secret-redactor

jidhra/claude-mods

Keeps secrets, email addresses and IP addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call

Guard & safety mods/plugin install

secret-vault

gcamara/secret-vault

Collects API keys and other secrets in a private modal and writes them straight to their target file, redacting them from the session.

Guard & safety mods/plugin install

secret-mod

zyx1121/secret-mod

Ask for credentials in a form, keep them in the macOS keychain, and run commands with them without showing the values to Claude

Guard & safety mods/plugin install

secrets-redactor

lakmadev/claude-mods

Scrubs API keys, tokens and private keys from prompts and tool output before the model sees them.

Guard & safety mods/plugin install

secret-mask

mashabek/claude-mods

Masks secrets (API keys, tokens, passwords, .env values) in tool output and prompts before Claude reads them

Guard & safety mods/plugin install

sensitive-guard

G1TS23/sensitive-guard

Garde-fou : suspend les commandes Bash sensibles et demande Proceed / Cancel dans un panneau avant exécution.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.