hamzafer/claude-code-mods v0.9.0 on GitHub

🔑 secret-guard: your keys never reach Claude.

claude plugin marketplace update claude-code-mods
claude plugin install secret-guard@claude-code-mods

✨ New: secret-guard 0.1.0

🙈 Hidden from Claude: a key in what a tool returns (cat .env, env, a file read, an MCP answer) becomes [hidden by secret-guard: GitHub token] before Claude reads it. It never reaches the model or the transcript.
✋ Asks before it lands: a Write or Edit that adds a key to a file git would commit asks Block it / Allow once. A git-ignored .env goes through.
🧾 Commits and pushes: git commit checks every change, including files the same command git adds. git push checks each commit no remote has yet, so a key added then deleted is still caught.
🔍 Scanner: 18 built-in rules (AWS, GitHub, Anthropic, OpenAI, Stripe, Slack, private keys, .env secrets and more), plus gitleaks's 150+ when installed. It all runs on your machine and never checks a key against its service.
📊 /secret-guard shows what it hid or held this session.

Tested in a live session before release. Notes and limits.

npx claude-code-mods@latest