Home / Claude Code mods / Security / secret-guard

secret-guard

secret-guard is a Claude Code mod by sverma24 that blocks reads of .env files and printing of API keys, with a red warning above the prompt.

Updated 2026-10-03

What is secret-guard?

secret-guard is a Claude Code mod by sverma24 that blocks reads of .env files and printing of API keys, with a red warning above the prompt. It is listed under Security and has no public popularity data yet.

TypeClaude code mod
Authorsverma24
Repositorysverma24/claude-code-mods
Popularityno public popularity data yet
CategorySecurity
SecurityLow risk (84/100)
Rank#4,744 of 5,272 Claude Code mods; #495 in Security
Last commit2026-10-03
Hooks3 events
Seesevery prompt, every tool call
Draws onAbovePrompt

Is secret-guard safe to install?

secret-guard scores 84/100 on the MCPMods security check: Low risk. Things to review: watches every prompt or event. It passed 6 of 8 checks.

Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.

CheckResult
No network accessPass
Starts no processesPass
Writes no files or configPass
Doesn't read environment variablesPass
Watches every prompt or eventReview
Doesn't drive ClaudePass
Passes claude plugin validatePass
No license detectedNote

API calls in its code

CallWhat it means
$.state.get
$.state.set
$.ui.resolvedraws interface

How do I install secret-guard?

  1. Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
    claude --version
  2. Read its footprint. This lists every event it hooks and every API call it makes, without running it.
    git clone https://github.com/sverma24/claude-code-mods
    claude plugin validate ./claude-code-mods/secret-guard
  3. Install it. Run this in your terminal, then /reload-plugins in an open session.
    claude plugin marketplace add sverma24/claude-code-mods && claude plugin install secret-guard@sauravgenai

Or ask Claude to set it up

Paste this into Claude Code and it installs secret-guard for you:

Install the "secret-guard" Claude Code mod from https://github.com/sverma24/claude-code-mods/tree/main/secret-guard. Run claude plugin validate on it first and show me what it can access before you enable it.

More from sverma24/claude-code-mods

This repository has 3 Claude Code mods on MCPMods.

  • checkpoint: Commits files Claude edited as a git checkpoint after each turn, and adds /rollback to undo the last one. (Low risk)
  • touched: /touched opens a pane listing every file Claude read or edited this session, with counts (Low risk)