What is secret-guard?
secret-guard is a Claude Code mod by Sajid-Rahman0126 that stops Claude from reading or editing .env files, private keys and credential files, including through symlinks and shell commands. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | Sajid-Rahman0126 |
| Repository | Sajid-Rahman0126/claude-studio-mods |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Low risk (100/100) |
| Rank | #4,500 of 5,272 Claude Code mods; #470 in Security |
| License | MIT |
| Last commit | 2026-10-09 |
| Hooks | 1 events |
| Sees | Bash calls, Edit calls, Read calls, Write calls |
| Draws on | nothing |
Is secret-guard safe to install?
secret-guard scores 100/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 8 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts no processes | Pass |
| Writes no files or config | Pass |
| Doesn't read environment variables | Pass |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.fs.stat | reads files |
$.ui.toast | draws interface |
How do I install secret-guard?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/Sajid-Rahman0126/claude-studio-mods claude plugin validate ./claude-studio-mods/mods/secret-guard
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add Sajid-Rahman0126/claude-studio-mods && claude plugin install secret-guard@claude-studio-mods
Or ask Claude to set it up
Paste this into Claude Code and it installs secret-guard for you:
Install the "secret-guard" Claude Code mod from https://github.com/Sajid-Rahman0126/claude-studio-mods/tree/main/mods/secret-guard. Run claude plugin validate on it first and show me what it can access before you enable it.
More from Sajid-Rahman0126/claude-studio-mods
This repository has 3 Claude Code mods on MCPMods.
- kanban-status: Shows your Obsidian Kanban board (BOARD.md) in the status line, with a /board pane listing every card (Low risk)
- touched-files: Keeps a running list of every file Claude edited or wrote this session: a count in the status line and a /touched pane (Low risk)