secret-drop

by Artem Islamov · ★ 2 · updated 2 days ago

BandsStatus lineGuardsCommandsPromptTools & agentsvalidates

0

Secure input window for API keys and passwords: Claude asks, you type into a masked field, the mod writes .env / GitHub Secrets itself. The value never enters the chat.

install secret-drop

Install

/plugin marketplace add aislam23/secret-drop
/plugin install secret-drop@secret-drop

Then run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.

View source on GitHub

What it hooks into

From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.

Events
session.starttool.callcommand.runprompt.submitui.render
API calls
$.clock.after$.command.register$.env.get$.fs.exists$.fs.read$.fs.write$.process.run$.prompt.fill$.prompt.read$.prompt.submit$.session.append$.session.cwd$.state.get$.state.set$.tool.register$.ui.close$.ui.focus$.ui.resolve$.ui.status$.ui.toast
Draws
AbovePrompt
Can see
mcp__secret-drop__request_secret callsevery prompt
Reach
level 2 of 3 runs processeswrites filesdrives Claudewrites the prompt boxreads filesreads env varsreads the prompt boxreads mod statedraws

Origin

How it got here
Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
Repository
github.com/aislam23/secret-drop
Path in repo
repository root
Source commit
a54d43a the exact code the scan read
Author
Artem Islamov @aislam23
License
MIT
First published
Last pushed
First listed here

Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.