secrets-veil
by OrchestKit · ★ 286 · updated yesterday
Masks secret values in tool results before the model reads them: named vendor variables, value-shape patterns, and high-entropy tokens. No reveal path.
Install
git clone https://github.com/yonatangross/orchestkitclaude --plugin-dir ./orchestkit/mods/secrets-veilThen run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.
What it hooks into
From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.
- Events
session.starttool.call- API calls
$.clock.after$.env.get$.ui.ask$.ui.copy$.ui.log$.ui.notice$.ui.status$.ui.toast- Can see
every tool call- Reach
- level 1 of 3 reads env varsdraws
Origin
- How it got here
- Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
- Repository
- github.com/yonatangross/orchestkit
- Path in repo
mods/secrets-veil- Author
- OrchestKit @yonatangross
- License
- MIT
- First published
- Last pushed
- First listed here
Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.
More from yonatangross/orchestkit
lesson-cards
yonatangross/orchestkit
Displays lesson hint cards when tool calls match known patterns. Additive surface during pilot; the classic --strict guard keeps its 12 block-severity denies.
memory-lens
yonatangross/orchestkit
Recalls the few memories related to each prompt: one line for the human, one context entry for the model. Local files only, no network on the hot path.
promote-lights
yonatangross/orchestkit
Shows CI status lights above the prompt while a promote PR (base main) is open. One REST page per minute, PR-open only. Cancelled is not-pass.