Claude Code mod
secrets-veil
Masks secret values in tool results before the model reads them: named vendor variables, value-shape patterns, and high-entropy tokens. No reveal path.
Install
git clone https://github.com/yonatangross/orchestkit.git
claude --plugin-dir ./orchestkit/mods/secrets-veilThe repo has no marketplace file, so load the plugin folder directly with --plugin-dir.
What it can access
- Reach
- L1Reads: writes the clipboard, reads env vars, draws
- Sees
- every tool call
- Hooks
session.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- yonatangross/orchestkit
- Folder
mods/secrets-veil- Author
- OrchestKit
- License
- MIT
- Last updated
- 1 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is secrets-veil?
Masks secret values in tool results before the model reads them: named vendor variables, value-shape patterns, and high-entropy tokens. No reveal path. It is a mod for Claude Code, from yonatangross/orchestkit on GitHub.
What can the secrets-veil mod access?
Its widest reach is "reads" (writes the clipboard, reads env vars, draws). It sees every tool call. Like any mod, it runs with your permissions.
How do I install secrets-veil?
Clone yonatangross/orchestkit and start Claude Code with --plugin-dir pointing at the mod's folder (mods/secrets-veil).
Is secrets-veil popular?
yonatangross/orchestkit has 300 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 1 November 2026.
More guard & safety mods
flightdeck
216scasella/claude-flightdeck
Flightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt and a session log, all from real session events
vibeclaude
161transkatgirl/vibeclaude
Feel every Claude Code lifecycle event through Intiface Central / buttplug.io. Streaming output, edits, tool results, permission prompts and turn completion are mapped to vibration pulses.
secret-box
101ray-amjad/claude-code-mods
Claude can use a secret without seeing it: a masked box saves keys to .env and gives Claude a placeholder, every key a tool prints comes back as a placeholder, and committing .env is refused
transcript-redactor
101ray-amjad/claude-code-mods
Keeps secrets and email addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call
tool-lines
83Tickloop/claude-mods
Draws each tool call as one compact 'tool_call: Tool(input) - meta' line and hides its result block
so-hud
52Kanevry/session-orchestrator
See Session Orchestrator status, warnings and session beacons in Claude Code ($.so contract v1), with protection gates for secret-printing commands, rule traps, outward actions and scope collisions.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.