Claude Code mod
sensitive-file-guard
Blocks Read, Write, Edit, Grep, Glob and Bash calls that touch .env files, private keys and credential stores.
Install
/plugin marketplace add Justmalhar/awesome-claude-mods
/plugin install sensitive-file-guard@awesome-claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers
- Sees
- every tool call
- Hooks
tool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- Justmalhar/awesome-claude-mods
- Folder
mods/sensitive-file-guard- Marketplace
awesome-claude-mods- Author
- Malhar Ujawane
- License
- MIT
- Last updated
- 4 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is sensitive-file-guard?
Blocks Read, Write, Edit, Grep, Glob and Bash calls that touch .env files, private keys and credential stores. It is a mod for Claude Code, from Justmalhar/awesome-claude-mods on GitHub.
What can the sensitive-file-guard mod access?
Its widest reach is "draws and remembers". It sees every tool call. Like any mod, it runs with your permissions.
How do I install sensitive-file-guard?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Justmalhar/awesome-claude-mods and then /plugin install sensitive-file-guard@awesome-claude-mods.
Is sensitive-file-guard popular?
Justmalhar/awesome-claude-mods has 1 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 4 October 2026.
More guard & safety mods
rainbow-prompt
1Broo37/claude-mods
Colors the prompt box as you type: ticket ids, paths, links, rainbow words, and a red warning on anything that looks like a secret
redact
3schreibse/claude-code-mods
Secrets found by betterleaks reach the model as ‹secret:…› tokens; Write/Edit restore them, other tools refuse them
secret-guard
2ShriD5/claude-mods
Stops Claude from writing API keys, tokens, private keys and database passwords into files.
blast-radius
Alyan-khattak/Claude-Code-Mods
Holds destructive shell commands, shows what they would delete or overwrite, and asks Proceed or Cancel.
secret-box
2iuliandita/mods
Resolves {{secret:NAME}} placeholders from Linux Secret Service or macOS Keychain at execution time, with optional directory scopes and host-specific output scrubbing.
blast-radius
kevinfactor/claude-kit
Stops destructive shell commands, lists exactly what they would delete or discard, and waits for a person to press Approve.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.