What is secchain-mask?
secchain-mask is a Claude Code mod by bannzai that hides SecChain's secret values in prompts, tool results and instructions before the model reads them, through secchain mask. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | bannzai |
| Repository | bannzai/SecChain |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Review before installing (76/100) |
| Rank | #2,701 of 5,272 Claude Code mods; #311 in Security |
| License | MIT |
| Last commit | 2026-10-16 |
| Hooks | 5 events |
| Sees | every prompt, every tool call, the system prompt |
| Draws on | nothing |
Is secchain-mask safe to install?
secchain-mask scores 76/100 on the MCPMods security check: Review before installing. Things to review: reads environment variables; watches every prompt or event. It passed 6 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts no processes | Pass |
| Writes no files or config | Pass |
| Reads environment variables | Review |
| Watches every prompt or event | Review |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.env.get | reads env vars |
$.fs.exists | reads files |
$.process.spawn | |
$.ui.log | draws interface |
How do I install secchain-mask?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/bannzai/SecChain claude plugin validate ./SecChain/skills/secchain/hooks/mods
- Install it. Run this in your terminal, then /reload-plugins in an open session.
git clone https://github.com/bannzai/SecChain && claude --plugin-dir ./SecChain/skills/secchain/hooks/mods
Or ask Claude to set it up
Paste this into Claude Code and it installs secchain-mask for you:
Install the "secchain-mask" Claude Code mod from https://github.com/bannzai/SecChain/tree/main/skills/secchain/hooks/mods. Run claude plugin validate on it first and show me what it can access before you enable it.