Claude Code mod

wt-secret-guard

Function-hook secret scrubber for prompts, assistant text, tool results, and raw outbound tool inputs

1 starsGuard & safety mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add home-dev-lab/workflow-toolbox
/plugin install wt-secret-guard@workflow-toolbox

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L2Writes or runs: runs processes, writes files, reads files, reads env vars, persists state, draws
Sees
Bash calls, Read calls, NotebookRead calls, Write calls, Edit calls, NotebookEdit calls, WebFetch calls, WebSearch calls, Agent calls, Task calls, Grep calls, Glob calls, /"^mcp__"/ calls, /".*"/ calls, every prompt
Draws in
AssistantMessage
Hooks
session.receiveprompt.attachmenttool.callturn.stepui.renderprompt.submit

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
home-dev-lab/workflow-toolbox
Folder
plugins/wt-secret-guard
Marketplace
workflow-toolbox
Author
Frederic Thomas
Type
Guard & safety mods
License
NOASSERTION
Last updated
31 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is wt-secret-guard?

Function-hook secret scrubber for prompts, assistant text, tool results, and raw outbound tool inputs It is a mod for Claude Code, from home-dev-lab/workflow-toolbox on GitHub.

What can the wt-secret-guard mod access?

Its widest reach is "writes or runs" (runs processes, writes files, reads files, reads env vars, persists state, draws). It sees Bash calls, Read calls, NotebookRead calls, Write calls, Edit calls, NotebookEdit calls, WebFetch calls, WebSearch calls, Agent calls, Task calls, Grep calls, Glob calls, /"^mcp__"/ calls, /".*"/ calls, every prompt. It draws in AssistantMessage. Like any mod, it runs with your permissions.

How do I install wt-secret-guard?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add home-dev-lab/workflow-toolbox and then /plugin install wt-secret-guard@workflow-toolbox.

Is wt-secret-guard popular?

home-dev-lab/workflow-toolbox has 1 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 31 October 2026.

More guard & safety mods

tunnel-guard

1

MatheusChiodi/cockpit

Asks before a command that exposes your machine to the internet: ngrok, cloudflared, ssh -R, tailscale funnel, a dev server on 0.0.0.0

Guard & safety mods/plugin install

plan

18

bendrucker/claude

Planning mode guidelines and context injection

Guard & safety mods/plugin install

statusline

1

thefuga/claude-x

A vim-style status bar in the Claude Code footer: editor mode, permission mode, model, effort, git state, usage and cursor; numbers the draft's lines and keeps the prompt box taller.

Guard & safety mods/plugin install

net-guard

4

Singh-AP/awesome-claude-mods

Stops data exfiltration and surprise network calls: checks every curl, wget, ssh, scp, git push and WebFetch against allow and deny lists, and asks before data goes to a host you haven't approved.

Guard & safety mods/plugin install

secret-guard

1

Wowbagger1994/claude-mods

Oscura i segreti (token, chiavi, password) nei risultati degli strumenti prima che Claude li legga

Guard & safety mods/plugin install

routine-watch

2

joeldg/claude-mods

Tells you when a scheduled routine (a scheduled-task run) stops to wait on you: a Mac notification, an optional phone push and a status line once a permission ask has stood 20 s (configurable; auto mode decides most asks by itself sooner) or when it asks you a question, plus a note when it finishes. Optionally lets routines read the web without asking. No model calls.

Guard & safety mods

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.