Claude Code mod

secret-shield

Refuses Write, Edit and Bash calls that contain secret-looking values (API keys, tokens, private keys)

Guard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source
git clone https://github.com/vincentlauriat/ModsTools.git
claude --plugin-dir ./ModsTools/mods/secret-shield

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L1Reads: reads mod state, draws
Sees
Write calls, Edit calls, Bash calls
Hooks
session.startcommand.runtool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
vincentlauriat/ModsTools
Folder
mods/secret-shield
Author
Vincent Lauriat
Type
Guard & safety mods
License
MIT
Last updated
5 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is secret-shield?

Refuses Write, Edit and Bash calls that contain secret-looking values (API keys, tokens, private keys) It is a mod for Claude Code, from vincentlauriat/ModsTools on GitHub.

What can the secret-shield mod access?

Its widest reach is "reads" (reads mod state, draws). It sees Write calls, Edit calls, Bash calls. Like any mod, it runs with your permissions.

How do I install secret-shield?

Clone vincentlauriat/ModsTools and start Claude Code with --plugin-dir pointing at the mod's folder (mods/secret-shield).

More guard & safety mods

french-guard

vincentlauriat/ModsTools

Toasts when the last answer looks English or is French written without accents; /french-guard off|on|status

Guard & safety mods

doc-sync-guard

vincentlauriat/ModsTools

Warns above the prompt when a turn did not update COMMANDS.md, or changed code without updating CHANGES.md

Guard & safety mods

main-guard

vincentlauriat/ModsTools

Refuses git pushes to main/master, force pushes, tag creation and GitHub releases unless the person allows them

Guard & safety mods

wrapper-guard

1

MatheusChiodi/cockpit

Refuses a global mvn or gradle command when the project ships mvnw or gradlew, so the pinned build tool runs

Guard & safety mods

weak-crypto-guard

1

MatheusChiodi/cockpit

Asks before an edit hashes passwords with MD5 or SHA-1, makes tokens with Math.random, or picks ECB or an unsigned JWT

Guard & safety mods/plugin install

upload-guard

1

MatheusChiodi/cockpit

Asks before a command sends a local file out: curl uploads, wget --post-file, scp or rsync to a host, nc

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.