Claude Code mod
secrets-guard
Stops Claude reading .env and key files, masks API keys in command output, and lets you hand Claude a key through a pane without it ever seeing the value
Install
/plugin marketplace add charlie947/mod-maker
/plugin install secrets-guard@charlie-free-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: writes files, drives Claude, reads files, reads mod state, draws
- Sees
- mcp__secrets-guard__env_list calls, mcp__secrets-guard__env_request calls, every tool call
- Draws in
Pane- Hooks
session.startcommand.runtool.callui.render
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- charlie947/mod-maker
- Folder
plugins/secrets-guard- Marketplace
charlie-free-mods- Author
- Charlie Hills
- Last updated
- 4 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secrets-guard?
Stops Claude reading .env and key files, masks API keys in command output, and lets you hand Claude a key through a pane without it ever seeing the value It is a mod for Claude Code, from charlie947/mod-maker on GitHub.
What can the secrets-guard mod access?
Its widest reach is "writes or runs" (writes files, drives Claude, reads files, reads mod state, draws). It sees mcp__secrets-guard__env_list calls, mcp__secrets-guard__env_request calls, every tool call. It draws in Pane. Like any mod, it runs with your permissions.
How do I install secrets-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add charlie947/mod-maker and then /plugin install secrets-guard@charlie-free-mods.
Is secrets-guard popular?
charlie947/mod-maker has 7 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 4 October 2026.
More guard & safety mods
supabase-guard
8Szotasz/claude-mods
Supabase guard: stops Supabase calls aimed at a project other than the current folder's, and asks in a one-key popup before destructive SQL, branch resets or project pauses. /supaor toggles. Hungarian or English.
write-guard
12VedantAndhale/claude-pro-kit
Steers Claude to Edit instead of rewriting an existing file in full with Write: the first rewrite in a conversation goes through with a one-line note, a later one is held back once; a deliberate retry still goes through.
delete-guard
14IT-Shelter-Labs/Claude-Mods
A Claude Code mod from IT-Shelter-Labs/Claude-Mods.
kill-guard
2cpeaustriajc/cj-stack
Denies a Bash command that stops processes by name or by port, because it can also stop another checkout's dev server; a kill of a named PID passes
unslop
4theonly1me/claude-code-mods
Finds AI slop in Claude's changes (dashes, comment blocks, comments that repeat the code, tests that assert nothing, filler phrases) and tells Claude to remove it. Shows what was unslopped.
mis-notas
2alexyslozada/claude-mods
Guarda notas con /nota y Claude las usa como tu contexto y tus preferencias en todas las sesiones
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.