Claude Code mod
secret-shield
Blocks edits and writes that would commit API keys, tokens or private keys.
Install
/plugin marketplace add Plagemes/claude-mods
/plugin install secret-shield@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L1Reads: reads files, draws, other: $.mods.hello, other: $.mods.mode, other: $.mods.publish, other: $.mods.registerTab
- Sees
- /"^(?:Edit|Write|MultiEdit|NotebookEdit)$"/ calls
- Hooks
session.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- Plagemes/claude-mods
- Folder
mods/secret-shield- Marketplace
claude-mods- Author
- Plagemes
- License
- MIT
- Last updated
- 15 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secret-shield?
Blocks edits and writes that would commit API keys, tokens or private keys. It is a mod for Claude Code, from Plagemes/claude-mods on GitHub.
What can the secret-shield mod access?
Its widest reach is "reads" (reads files, draws, other: $.mods.hello, other: $.mods.mode, other: $.mods.publish, other: $.mods.registerTab). It sees /"^(?:Edit|Write|MultiEdit|NotebookEdit)$"/ calls. Like any mod, it runs with your permissions.
How do I install secret-shield?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Plagemes/claude-mods and then /plugin install secret-shield@claude-mods.
Is secret-shield popular?
Plagemes/claude-mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 15 October 2026.
More guard & safety mods
secret-scan
3baselane-sh/mods
Adds /secret-scan: tracked files and line numbers that hold secret-shaped text, found with git grep. Never prints a matched value. Read-only. Copies the result to your clipboard.
security-mode
3baselane-sh/mods
Checks each change for injection, secrets, authorization and unsafe input, and states the risks it checked.
secret-output-guard
3baselane-sh/mods
Tells Claude not to repeat a credential that showed up in command or file output, and names the source to rotate.
seed-guard
3Plagemes/claude-mods
Blocks database seed, reset and drop commands unless DATABASE_URL points at your own machine.
secret-guard
3baselane-sh/mods
Asks before a live API key, token or private key is written, edited or run.
sql-safety
3Plagemes/claude-mods
Flags UPDATE and DELETE without WHERE in .sql files and in queries inside your code.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.