secret-guard

by Tim Kennedy · ★ 0 · updated 10 days ago

Blocks git commit and git push from Claude when the change carries a secret file or a credential-shaped line, and flags secret files that are not gitignored

install secret-guard

Install

git clone https://github.com/tksunw/secret-guard

claude --plugin-dir ./secret-guard

Then run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.

View source on GitHub

What it hooks into

From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.

Events: tool.call
API calls: $.env.get$.fs.read$.process.run$.session.cwd$.ui.toast
Can see: Edit callsWrite callsBash calls
Reach: level 2 of 3 runs processesreads filesreads env varsdraws

Origin

How it got here: Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of 18 Oct 2026).
Repository: github.com/tksunw/secret-guard
Path in repo: repository root
Source commit: 5244dfb the exact code the scan read
Author: Tim Kennedy @tksunw
License: MIT
First published: 8 Oct 2026
Last pushed: 8 Oct 2026
First listed here: 19 Oct 2026

Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.