Claude Code mod
secret-shield
Keeps secrets out of Claude's context: API keys, tokens, private keys and passwords in tool output are replaced with [REDACTED:kind] before the model or the transcript ever sees them.
Install
/plugin marketplace add Singh-AP/awesome-claude-mods
/plugin install secret-shield@awesome-claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers: persists state, draws
- Sees
- every tool call
- Hooks
session.startsession.appendtool.callcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- Singh-AP/awesome-claude-mods
- Folder
mods/safety/secret-shield- Marketplace
awesome-claude-mods- Author
- awesome-claude-mods
- License
- MIT
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-shield?
Keeps secrets out of Claude's context: API keys, tokens, private keys and passwords in tool output are replaced with [REDACTED:kind] before the model or the transcript ever sees them. It is a mod for Claude Code, from Singh-AP/awesome-claude-mods on GitHub.
What can the secret-shield mod access?
Its widest reach is "draws and remembers" (persists state, draws). It sees every tool call. Like any mod, it runs with your permissions.
How do I install secret-shield?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Singh-AP/awesome-claude-mods and then /plugin install secret-shield@awesome-claude-mods.
Is secret-shield popular?
Singh-AP/awesome-claude-mods has 4 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 31 October 2026.
More guard & safety mods
whoopgate
2ShriD5/claude-mods
Live WHOOP heart rate in the status line; risky Bash commands are blocked while it is over your limit
secret-shield
1ryx2/slopshopper
Keeps secrets out of the transcript and out of the repo: redacts API keys, tokens, private keys and password URLs from tool results before Claude reads them, and refuses a Write, Edit or Bash command that embeds one.
routine-watch
2joeldg/claude-mods
Tells you when a scheduled routine (a scheduled-task run) stops to wait on you: a Mac notification, an optional phone push and a status line once a permission ask has stood 20 s (configurable; auto mode decides most asks by itself sooner) or when it asks you a question, plus a note when it finishes. Optionally lets routines read the web without asking. No model calls.
stall-alarm
2joeldg/claude-mods
Raises the alarm when a long-running session stalls while you are away: a permission dialog or a question that has waited for you past a threshold (toast, Mac notification, optional phone push, repeated while it stays open), and a turn that stopped on a login, usage-limit or billing error, with the fix. Leaves scheduled routines to routine-watch. No model calls.
net-guard
4Singh-AP/awesome-claude-mods
Stops data exfiltration and surprise network calls: checks every curl, wget, ssh, scp, git push and WebFetch against allow and deny lists, and asks before data goes to a host you haven't approved.
safe-delete
7charlie947/mod-maker
Claude never deletes a file for good: rm, find -delete and git clean move files to the Bin, with a receipt and /undo-delete
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.