detector-secretos
by Victor Tinoco · ★ 0 · updated yesterday
Revisa lo que Claude escribe y lo que va a commitear, y se detiene si encuentra API keys, tokens, llaves privadas o contraseñas; /secretos muestra el historial. · Stops Claude before it writes or commits API keys, tokens, private keys or passwords.
Install
/plugin marketplace add Vincitorecode/mods-equipo/plugin install detector-secretos@mods-equipoThen run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.
What it hooks into
From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.
- Events
session.startcommand.runtool.callui.render- API calls
$.clock.now$.command.register$.env.get$.process.run$.session.cwd$.settings.read$.state.get$.state.set$.ui.ask$.ui.invalidate$.ui.log$.ui.open$.ui.resolve$.ui.toast- Draws
AbovePromptPane- Can see
Write callsEdit callsNotebookEdit callsBash calls- Reach
- level 2 of 3 other: $.state.getother: $.state.setruns processesreads env varsreads settingsdraws
Origin
- How it got here
- Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
- Repository
- github.com/Vincitorecode/mods-equipo
- Path in repo
plugins/detector-secretos- Source commit
8affe9cthe exact code the scan read- Author
- Victor Tinoco @Vincitorecode
- License
- MIT
- First published
- Last pushed
- First listed here
Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.
More from Vincitorecode/mods-equipo
contexto-costo
Vincitorecode/mods-equipo
Barra de contexto bajo cada llamada (principal y subagentes), banda con contexto, costo y límites; /costo abre el detalle. · Context bar under each tool call, a band with context, cost and limits; /costo opens the details.
guardia-produccion
Vincitorecode/mods-equipo
Detiene comandos riesgosos (deploys, migraciones, borrados, force push, kubectl en prod) y pide confirmación; /guardia muestra lo que vigila y lo que detuvo. · Stops risky commands (deploys, migrations, deletes, force push, kubectl on prod) and asks first.