secrets
by falkoro · ★ 1 · updated 5 days ago
0
Claude asks for API keys in a masked field above the prompt, saves them to the macOS Keychain, Linux keyring or Windows DPAPI, and uses them in Bash without ever seeing them
Install
/plugin marketplace add falkoro/claude-code-secrets/plugin install secrets@falkoroThen run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.
What it hooks into
From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.
- Events
session.starttool.callcommand.runui.render- API calls
$.command.register$.env.get$.process.run$.state.get$.state.set$.store.get$.store.set$.tool.register$.ui.resolve$.ui.toast- Draws
AbovePrompt- Can see
mcp__secrets__ask_secret callsevery tool call- Reach
- level 2 of 3 other: $.state.getother: $.state.setruns processesdrives Claudereads env varspersists statedraws
Origin
- How it got here
- Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
- Repository
- github.com/falkoro/claude-code-secrets
- Path in repo
- repository root
- Source commit
34027fethe exact code the scan read- Author
- @falkoro
- License
- MIT
- First published
- Last pushed
- First listed here
Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.