Skip to content

v0.9.0: secret-guard, your keys never reach Claude

Latest
Latest

Choose a tag to compare

View all tags
@hamzafer hamzafer released this 05 Nov 12:15
· 3 commits to main since this release
v0.9.0
59dc940
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🔑 secret-guard: your keys never reach Claude.

secret-guard

claude plugin marketplace update claude-code-mods
claude plugin install secret-guard@claude-code-mods

✨ New: secret-guard 0.1.0

  • 🙈 Hidden from Claude: a key in what a tool returns (cat .env, env, a file read, an MCP answer) becomes [hidden by secret-guard: GitHub token] before Claude reads it. It never reaches the model or the transcript.
  • ✋ Asks before it lands: a Write or Edit that adds a key to a file git would commit asks Block it / Allow once. A git-ignored .env goes through.
  • 🧾 Commits and pushes: git commit checks every change, including files the same command git adds. git push checks each commit no remote has yet, so a key added then deleted is still caught.
  • 🔍 Scanner: 18 built-in rules (AWS, GitHub, Anthropic, OpenAI, Stripe, Slack, private keys, .env secrets and more), plus gitleaks's 150+ when installed. It all runs on your machine and never checks a key against its service.
  • 📊 /secret-guard shows what it hid or held this session.

Tested in a live session before release. Notes and limits.

🔄 Update

npx claude-code-mods@latest
Assets 2
Loading