secret-guard
secret-guard is a Claude Code plugin that blocks secrets from ever landing in source files by using a PreToolUse hook to scan every Edit/Write operation for real-looking credentials (AWS keys, GitHub/OpenAI/Stripe/Slack tokens, Google keys, private keys, hardcoded api_key literals) and prevents the write before it reaches a tracked file. It allows .env files, placeholders, and environment variable reads while failing open on errors.
Install
Source: https://github.com/logicleap-labs/claude-plugins/tree/HEAD/plugins/secret-guard
What it's made of
1 command · 1 skill · 1 hook
- Commands
- 1
- Agents
- 0
- Skills
- 1
- MCP servers
- 0
- Hooks
- 1 · PreToolUse
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
python3- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (logicleap-labs).