What is secret-redactor?
secret-redactor is a Claude Code mod by oleksandrkodua that masks API keys, tokens, private keys and password assignments in tool results before the model sees them. It is listed under Security and has no public popularity data yet.
| Type | Claude code mod |
|---|---|
| Author | oleksandrkodua |
| Repository | oleksandrkodua/qa-mods |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Low risk (96/100) |
| Rank | #4,209 of 5,272 Claude Code mods; #439 in Security |
| Last commit | 2026-10-14 |
| Hooks | 1 events |
| Sees | every tool call |
| Draws on | nothing |
Is secret-redactor safe to install?
secret-redactor scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 7 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts no processes | Pass |
| Writes no files or config | Pass |
| Doesn't read environment variables | Pass |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| No license detected | Note |
How do I install secret-redactor?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/oleksandrkodua/qa-mods claude plugin validate ./qa-mods/secret-redactor
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add oleksandrkodua/qa-mods && claude plugin install secret-redactor@qa-mods
Or ask Claude to set it up
Paste this into Claude Code and it installs secret-redactor for you:
Install the "secret-redactor" Claude Code mod from https://github.com/oleksandrkodua/qa-mods/tree/main/secret-redactor. Run claude plugin validate on it first and show me what it can access before you enable it.
More from oleksandrkodua/qa-mods
This repository has at least 9 Claude Code mods on MCPMods.
- blast-radius: Before a risky Bash command runs, says what it will touch. A plain deletion is judged by git: files outside git or track (Review before installing)
- evidence-saver: Saves every image (screenshot) returned by a tool to a folder the user picks: the first screenshot asks for the path, th (Review before installing)
- handoff: The mini Clippy beside the band above the prompt: calm / worried / panic by context fill, with random Ukrainian remarks; (Low risk)
- hud: One line above the prompt: context fill, rate-limit windows, a cache chip (кеш 59:48, m:ss) while the prompt cache is wa (Low risk)
- next-steps-uk: Fork of next-steps (MIT, Thariq Shihipar): suggested next prompts are always written in Ukrainian. Install INSTEAD of ne (Low risk)
- notify: A quick pop-up (toast, plus a macOS system notification) when a long Bash command or a long turn finishes, so you can st (Low risk)
- plan-progress: Live plan progress bars above the Claude Code prompt: stages, steps, a pixel fill and soft sounds for decision, error an (Review before installing)
- quick-actions: In VS Code (no band above the prompt) the typed /compact and /clear ask first (confirm / cancel). The Compact and Clear (Low risk)