secret-box
by Ray Amjad · ★ 36 · updated today
Claude can use a secret without seeing it: a masked box saves keys to .env and gives Claude a placeholder, every key a tool prints comes back as a placeholder, and committing .env is refused
Install
/plugin marketplace add ray-amjad/awesome-claude-code-function-hooks/plugin install secret-box@claude-code-modsThen run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.
What it hooks into
From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.
- Events
prompt.submittool.callprompt.contextprompt.attachmentprompt.mentionagent.spawnsession.startui.renderui.close- API calls
$.clock.now$.fs.exists$.fs.read$.fs.write$.process.run$.session.cwd$.session.surfaces$.tool.register$.ui.close$.ui.invalidate$.ui.log$.ui.notice$.ui.open$.ui.resolve$.ui.toast- Draws
PaneAbovePrompt- Can see
every promptevery tool callthe system promptsubagent spawnsBash calls/"^(Bash|Read|Grep|Edit|MultiEdit|NotebookEdit)$"/ callsmcp__secret-box__request_secret calls- Reach
- level 2 of 3 runs processeswrites filesdrives Claudereads filesdraws
Origin
- How it got here
- Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
- Repository
- github.com/ray-amjad/awesome-claude-code-function-hooks
- Path in repo
plugins/secret-box- Source commit
812a5e9the exact code the scan read- Author
- Ray Amjad @ray-amjad
- License
- MIT
- First published
- Last pushed
- First listed here
Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.
More from ray-amjad/awesome-claude-code-function-hooks
cache-clock
ray-amjad/awesome-claude-code-function-hooks
A one-line band above the prompt: context used, and a countdown until the prompt cache goes cold
decision-tree
ray-amjad/awesome-claude-code-function-hooks
When Claude ends a reply with a question, explains the choice in a side pane and lets you explore any option, or your own, in a real forked session
diagram-pane
ray-amjad/awesome-claude-code-function-hooks
A side pane that pins every diagram Claude draws and keeps a live map of the work
dream-pass
ray-amjad/awesome-claude-code-function-hooks
A dreaming pass over Claude's memory folder: merges duplicates, rewrites stale entries, removes dead ones and tidies MEMORY.md, with a backup and undo
jev-skill-suggestion
ray-amjad/awesome-claude-code-function-hooks
Scores every skill against your prompt with TypeSafe Jev as you type; observe, block or steer skill loading
memory-fork
ray-amjad/awesome-claude-code-function-hooks
After each turn Haiku decides whether memory needs a change; a tool-less fork of the session drafts it and the mod writes it, with a band and a pane showing what changed
prompt-bouncer
ray-amjad/awesome-claude-code-function-hooks
Bounces vague prompts before Claude sees them, and suggests the project's own term
secret-redactor
ray-amjad/awesome-claude-code-function-hooks
Keeps secrets, email addresses and IP addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call
transcript-redactor
ray-amjad/awesome-claude-code-function-hooks
Keeps secrets and email addresses out of the session transcript: swaps each one for a stable placeholder on the way in, and puts the real value back on the way into a tool call
vercel-deploy-status
ray-amjad/awesome-claude-code-function-hooks
Pins the Vercel deploy queue of the linked project under the prompt: every deploy queued, building or just finished, with its phase and elapsed time