What is detector-secretos?
detector-secretos is a Claude Code mod by Vincitorecode that revisa lo que Claude escribe y lo que va a commitear, y se detiene si encuentra API keys, tokens, llaves privadas o contraseñas; /secretos muestra el historial. · Stops Claude before it. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | Vincitorecode |
| Repository | Vincitorecode/mods-equipo |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Review before installing (76/100) |
| Rank | #5,072 of 5,272 Claude Code mods; #525 in Security |
| License | MIT |
| Last commit | 2026-10-14 |
| Hooks | 4 events |
| Sees | Bash calls, Edit calls, NotebookEdit calls, Write calls |
| Draws on | AbovePrompt, Pane |
Is detector-secretos safe to install?
detector-secretos scores 76/100 on the MCPMods security check: Review before installing. Things to review: starts processes outside the sandbox; reads environment variables. It passed 6 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts processes outside the sandbox | Review |
| Writes no files or config | Pass |
| Reads environment variables | Review |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.clock.now | |
$.command.register | |
$.env.get | reads env vars |
$.process.run | runs processes |
$.session.cwd | |
$.settings.read | reads settings |
$.state.get | |
$.state.set | |
$.ui.ask | draws interface |
$.ui.invalidate | draws interface |
$.ui.log | draws interface |
$.ui.open | draws interface |
$.ui.resolve | draws interface |
$.ui.toast | draws interface |
How do I install detector-secretos?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/Vincitorecode/mods-equipo claude plugin validate ./mods-equipo/plugins/detector-secretos
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add Vincitorecode/mods-equipo && claude plugin install detector-secretos@mods-equipo
Or ask Claude to set it up
Paste this into Claude Code and it installs detector-secretos for you:
Install the "detector-secretos" Claude Code mod from https://github.com/Vincitorecode/mods-equipo/tree/main/plugins/detector-secretos. Run claude plugin validate on it first and show me what it can access before you enable it.
More from Vincitorecode/mods-equipo
This repository has 3 Claude Code mods on MCPMods.
- contexto-costo: Barra de contexto bajo cada llamada (principal y subagentes), banda con contexto, costo y límites; /costo abre el detall (Review before installing)
- guardia-produccion: Detiene comandos riesgosos (deploys, migraciones, borrados, force push, kubectl en prod) y pide confirmación; /guardia m (Review before installing)