Claude Code mod
shroud
Revenantworks shroud mod for Claude Code 2.1.287+: masks secrets (its own shapes plus the gitleaks rule set), stream keys and, if you turn them on, personal data and your own word list before Claude reads them (restoring a value only into the gitignored file it came from), flags a credential keywarden marked for rotation, and marks web, MCP and mail results and messages from routines or other sessions as data. Kept apart from the vigil plugin, so safety never depends on the dashboard. Never blocks your work; keeps no record; contacts no service.
Install
/plugin marketplace add revenantworks/claude-skills
/plugin install shroud@revenantworksMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, writes files, drives Claude, reads files, reads env vars, draws
- Sees
- every prompt, every tool call
- Hooks
session.startprompt.submittool.callsession.appendsession.receivecommand.runcommand.describeturn.complete
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- revenantworks/claude-skills
- Folder
mods/shroud- Marketplace
revenantworks- Author
- Revenantworks
- License
- Apache-2.0
- Last updated
- 31 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is shroud?
Revenantworks shroud mod for Claude Code 2.1.287+: masks secrets (its own shapes plus the gitleaks rule set), stream keys and, if you turn them on, personal data and your own word list before Claude reads them (restoring a value only into the gitignored file it came from), flags a credential keywarden marked for rotation, and marks web, MCP and mail results and messages from routines or other sessions as data. Kept apart from the vigil plugin, so safety never depends on the dashboard. Never blocks your work; keeps no record; contacts no service. It is a mod for Claude Code, from revenantworks/claude-skills on GitHub.
What can the shroud mod access?
Its widest reach is "writes or runs" (runs processes, writes files, drives Claude, reads files, reads env vars, draws). It sees every prompt, every tool call. Like any mod, it runs with your permissions.
How do I install shroud?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add revenantworks/claude-skills and then /plugin install shroud@revenantworks.
Is shroud popular?
revenantworks/claude-skills has 2 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 31 October 2026.
More guard & safety mods
secret-drop
2aislam23/secret-drop
Secure input window for API keys and passwords: Claude asks, you type into a masked field, the mod writes .env / GitHub Secrets itself. The value never enters the chat.
tamirs-superpowers-guard
2Tamircohen28/tamirs-superpowers
In-process guard for tamirs-superpowers: holds a destructive shell command (force push, rm -rf, git reset --hard, ...) until you answer Proceed or Cancel, and refuses a file write in the main checkout while an orchestration objective is active. Companion to the core plugin; Claude Code and Claude Desktop only.
redact
2karanb192/claude-code-redact
Redacts secrets and PII from every row Claude Code stores, before the model reads it and before the transcript keeps it. Reach L0: no network, no processes, no files.
vanguard
2XXX1694/Vanguard
Command center for Claude Code: a live pane for your squad of subagents, limits and context, an orchestrator that fans work out to specialist agents, bundled MCP servers and skills, and a lifetime profile with levels and achievements.
rate-limit-guard
2sciccolella/claude-ratelimit-mod
At 90% of the 5-hour limit, tells the orchestrator and every subagent to checkpoint and stop at a safe point, then resumes them after the window resets.
vibeship
2wag-me/vibeship
Vibeship: a 3D spaceship where your Claude Code agents work in crew uniforms. Pick the deck, furnish the stations, chat with the agents and approve permissions. Command: /vibeship
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.