Claude Code mod

secret-shield

Keeps secrets out of the transcript and out of the repo: redacts API keys, tokens, private keys and password URLs from tool results before Claude reads them, and refuses a Write, Edit or Bash command that embeds one.

1 starsGuard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source
git clone https://github.com/ryx2/slopshopper.git
claude --plugin-dir ./slopshopper/mods/secret-shield

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L1Reads: reads mod state, draws
Sees
Write|Edit calls, Bash calls
Draws in
AbovePrompt
Hooks
session.startturn.startcommand.runtool.callsession.appendui.render

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
ryx2/slopshopper
Folder
mods/secret-shield
Author
slopshopper
Type
Guard & safety mods
Website
slopshopper.com/mods/slopshopper-secret-shield
License
MIT
Last updated
26 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-shield?

Keeps secrets out of the transcript and out of the repo: redacts API keys, tokens, private keys and password URLs from tool results before Claude reads them, and refuses a Write, Edit or Bash command that embeds one. It is a mod for Claude Code, from ryx2/slopshopper on GitHub.

What can the secret-shield mod access?

Its widest reach is "reads" (reads mod state, draws). It sees Write|Edit calls, Bash calls. It draws in AbovePrompt. Like any mod, it runs with your permissions.

How do I install secret-shield?

Clone ryx2/slopshopper and start Claude Code with --plugin-dir pointing at the mod's folder (mods/secret-shield).

Is secret-shield popular?

ryx2/slopshopper has 1 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 26 October 2026.

More guard & safety mods

secret-shield

4

Singh-AP/awesome-claude-mods

Keeps secrets out of Claude's context: API keys, tokens, private keys and passwords in tool output are replaced with [REDACTED:kind] before the model or the transcript ever sees them.

Guard & safety mods/plugin install

stall-alarm

2

joeldg/claude-mods

Raises the alarm when a long-running session stalls while you are away: a permission dialog or a question that has waited for you past a threshold (toast, Mac notification, optional phone push, repeated while it stays open), and a turn that stopped on a login, usage-limit or billing error, with the fix. Leaves scheduled routines to routine-watch. No model calls.

Guard & safety mods

whoopgate

2

ShriD5/claude-mods

Live WHOOP heart rate in the status line; risky Bash commands are blocked while it is over your limit

Guard & safety mods

safe-delete

7

charlie947/mod-maker

Claude never deletes a file for good: rm, find -delete and git clean move files to the Bin, with a receipt and /undo-delete

Guard & safety mods/plugin install

routine-watch

2

joeldg/claude-mods

Tells you when a scheduled routine (a scheduled-task run) stops to wait on you: a Mac notification, an optional phone push and a status line once a permission ask has stood 20 s (configurable; auto mode decides most asks by itself sooner) or when it asks you a question, plus a note when it finishes. Optionally lets routines read the web without asking. No model calls.

Guard & safety mods

auth-guard

DominickGiordano/claude-mods

Spots an expired CLI login in tool output and offers a Login button that signs in and retries.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.