What is secret-scrubber?
secret-scrubber is a Claude Code mod by TroyJLorents-GH that redacts API keys, tokens, private keys and .env secrets from tool output before the transcript stores it and before the model reads it. It is listed under Security and has 1 GitHub stars.
| Type | Claude code mod |
|---|---|
| Author | TroyJLorents-GH |
| Repository | TroyJLorents-GH/mod-squad |
| Popularity | 1 GitHub stars |
| Category | Security |
| Security | Low risk (96/100) |
| Rank | #2,356 of 5,272 Claude Code mods; #281 in Security |
| Last commit | 2026-10-13 |
| Hooks | 3 events |
| Sees | only the events it hooks |
| Draws on | nothing |
Is secret-scrubber safe to install?
secret-scrubber scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 7 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| No network access | Pass |
| Starts no processes | Pass |
| Writes no files or config | Pass |
| Doesn't read environment variables | Pass |
| Only sees the events it hooks | Pass |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| No license detected | Note |
API calls in its code
| Call | What it means |
|---|---|
$.command.register | |
$.state.get | |
$.state.set | |
$.ui.status | draws interface |
$.ui.toast | draws interface |
How do I install secret-scrubber?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/TroyJLorents-GH/mod-squad claude plugin validate ./mod-squad/mods/secret-scrubber
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add TroyJLorents-GH/mod-squad && claude plugin install secret-scrubber@mod-squad
Or ask Claude to set it up
Paste this into Claude Code and it installs secret-scrubber for you:
Install the "secret-scrubber" Claude Code mod from https://github.com/TroyJLorents-GH/mod-squad/tree/main/mods/secret-scrubber. Run claude plugin validate on it first and show me what it can access before you enable it.
More from TroyJLorents-GH/mod-squad
This repository has at least 9 Claude Code mods on MCPMods.
- burn-rate: A terminal cost dashboard (/burn): spend by day, project, model, activity, tools, shell commands and MCP servers, read f (Review before installing)
- context-gauge: A band above the prompt showing how full the context window is, shading green → orange → red, with a nudge to /compact a (Low risk)
- model-router: Routes each turn to the cheapest model + effort that fits the task (Haiku 5.5 → Sonnet 5.5 → Opus 5.5 → Fable 5.1) and s (Low risk)
- ping: Plays a chime and shows a toast when a long turn finishes (or Claude is waiting on your approval), so you can walk away. (Low risk)
- safety-net: Blocks destructive tool calls before they run (force pushes, rm -rf outside the project, DROP TABLE, terraform destroy, (Low risk)
- session-graph: A knowledge graph across your Claude Code sessions. Each session records its topics and files; when another session cove (High risk)
- standup: /standup: click Generate and get a written standup of everything you got done today, grouped by project, from your local (High risk)
- stock-watch: /stock: watch tickers and get a chime when one reaches the low or high you set. Works any time, in any session. (High risk)