What is secret-box?
secret-box is a Claude Code mod by ray-amjad that claude can use a secret without seeing it: a masked box saves keys to .env and gives Claude a placeholder, every key a tool prints comes back as a placeholder, and committing .env is refused. It is listed under Security and has 72 GitHub stars.
| Type | Claude code mod |
|---|---|
| Author | ray-amjad |
| Repository | ray-amjad/awesome-claude-code-function-hooks |
| Popularity | 72 GitHub stars |
| Category | Security |
| Security | High risk (52/100) |
| Rank | #222 of 5,272 Claude Code mods; #37 in Security |
| License | MIT |
| Last commit | 2026-10-17 |
| Stars this week | +68 |
| Hooks | 9 events |
| Sees | /"^(Bash|Read|Grep|Edit|MultiEdit|NotebookEdit)$"/ calls, Bash calls, every prompt, every tool call, mcp__secret-box__request_secret calls, subagent spawns, the system prompt |
| Draws on | Pane, AbovePrompt |
Is secret-box safe to install?
secret-box scores 52/100 on the MCPMods security check: High risk. Things to review: starts processes outside the sandbox; writes files or config; reads environment variables; watches every prompt or event. It passed 4 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts processes outside the sandbox | Review |
| Writes files or config | Review |
| Reads environment variables | Review |
| Watches every prompt or event | Review |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.clock.now | |
$.env.get | reads env vars |
$.fs.exists | reads files |
$.fs.read | reads files |
$.fs.write | writes files |
$.process.run | runs processes |
$.session.cwd | |
$.session.surfaces | |
$.tool.register | drives Claude |
$.ui.close | draws interface |
$.ui.invalidate | draws interface |
$.ui.log | draws interface |
$.ui.notice | draws interface |
$.ui.open | draws interface |
$.ui.resolve | draws interface |
$.ui.toast | draws interface |
How do I install secret-box?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/ray-amjad/awesome-claude-code-function-hooks claude plugin validate ./awesome-claude-code-function-hooks/plugins/secret-box
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add ray-amjad/awesome-claude-code-function-hooks && claude plugin install secret-box@claude-code-mods
Or ask Claude to set it up
Paste this into Claude Code and it installs secret-box for you:
Install the "secret-box" Claude Code mod from https://github.com/ray-amjad/awesome-claude-code-function-hooks/tree/main/plugins/secret-box. Run claude plugin validate on it first and show me what it can access before you enable it.
More from ray-amjad/awesome-claude-code-function-hooks
This repository has at least 9 Claude Code mods on MCPMods.
- cache-clock: A one-line band above the prompt: context used, and a countdown until the prompt cache goes cold (Review before installing)
- decision-tree: When Claude ends a reply with a question, explains the choice in a side pane and lets you explore any option, or your ow (Review before installing)
- diagram-pane: A side pane that pins every diagram Claude draws, keeps a live map of the work, and lets you go into boxes and change th (Review before installing)
- dream-pass: A dreaming pass over Claude's memory folder: merges duplicates, rewrites stale entries, removes dead ones and tidies MEM (Review before installing)
- jev-skill-suggestion: Scores every skill against your prompt with TypeSafe Jev as you type; observe, block or steer skill loading (Review before installing)
- memory-fork: After each turn Haiku decides whether memory needs a change; a tool-less fork of the session drafts it and the mod write (Review before installing)
- prompt-bouncer: Bounces vague prompts before Claude sees them, and suggests the project's own term (Review before installing)
- transcript-redactor: Keeps secrets and email addresses out of the session transcript: swaps each one for a stable placeholder on the way in, (Low risk)