What is secret-guard?
secret-guard is a Claude Code mod by hagaybar that keeps API keys, tokens and passwords out of the transcript, tool output, files, commits, PRs and issues. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | hagaybar |
| Repository | hagaybar/claude-secret-guard |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Review before installing (68/100) |
| Rank | #3,323 of 5,272 Claude Code mods; #368 in Security |
| Last commit | 2026-10-06 |
| Hooks | 5 events |
| Sees | every tool call |
| Draws on | AbovePrompt |
Is secret-guard safe to install?
secret-guard scores 68/100 on the MCPMods security check: Review before installing. Things to review: starts processes outside the sandbox; writes files or config. It passed 4 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts processes outside the sandbox | Review |
| Writes files or config | Review |
| Doesn't read environment variables | Pass |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Validator reported problems | Note |
| No license detected | Note |
API calls in its code
| Call | What it means |
|---|---|
$.clock.now | |
$.command.register | |
$.config.list | |
$.config.set | changes config |
$.fs.read | reads files |
$.process.run | runs processes |
$.session.cwd | |
$.state.get | |
$.state.set | |
$.store.get | keeps its own state |
$.store.set | keeps its own state |
$.ui.notice | draws interface |
$.ui.resolve | draws interface |
$.ui.status | draws interface |
$.ui.toast | draws interface |
How do I install secret-guard?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/hagaybar/claude-secret-guard claude plugin validate ./claude-secret-guard/.
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add hagaybar/claude-secret-guard && claude plugin install secret-guard@hagay-mods
Or ask Claude to set it up
Paste this into Claude Code and it installs secret-guard for you:
Install the "secret-guard" Claude Code mod from https://github.com/hagaybar/claude-secret-guard. Run claude plugin validate on it first and show me what it can access before you enable it.