ClaudeMods
☰
All projectsCommunity submissionsPromptsToolsFree toolsGuidesSponsors1 feed slots leftDashboards & HUD189Usage & costs50Security & privacy55Memory & context21Workflows & CI227Git & code review33Multi-agent orchestration99Prompts & input25Notifications & reminders33Games & entertainment61Themes & appearance45Audio & multimedia9Tools & integrations100Development & debugging24Other87
EN
● 0 online · Views 0 times
SponsorsSubmit a project
GitHub repositories · by Fazzani

secret-mask

Masks secrets (API keys, tokens, passwords, private keys) in the Claude Code transcript; hover a masked value to reveal it.

Fazzani@Fazzani

Fazzani/claude-mods/tree/main/plugins/secret-mask

Translated

About this mod

Masks secrets in the Claude Code transcript. Hover a masked value with the mouse to reveal it.

● Your key is sk-a•••••••• ← hover → sk-ant-api03-AbCd…

What is detected: private key blocks, Anthropic / OpenAI / GitHub / GitLab / Slack / Google / Stripe / npm tokens, AWS access keys and secret keys, JWTs, Azure AccountKey= / SharedAccessKey= / sig=, passwords in URLs (postgres://user:pass@host), Bearer tokens, and generic assignments (password=…, api_key: …, client_secret=…). References and placeholders (${TOKEN}, <key>, process.env.X, xxxx) are left alone. Rules live in hooks/patterns.ts.

Where masked: assistant replies and prompts (masked with hover reveal), bash output and text results (masked, first 12 lines; ctrl+o shows the rest), tool call arguments / structured results / messages from other agents (masked, no reveal). Masking only changes what the screen shows; the model and transcript file still see the real values. Hover needs a surface that reports the pointer: the desktop app or the terminal's fullscreen layout.

Installation

Check the author's README for the marketplace and plugin name first. Commands may change as the repository evolves.

claude plugin marketplace add Fazzani/claude-mods
claude plugin install secret-mask
Original text / README

secret-mask

Masks secrets in the Claude Code transcript. Hover a masked value with the mouse to reveal it.

● Your key is sk-a••••••••      ← hover → sk-ant-api03-AbCd…

What is detected

Private key blocks, Anthropic / OpenAI / GitHub / GitLab / Slack / Google / Stripe / npm tokens, AWS access keys and secret keys, JWTs, Azure AccountKey= / SharedAccessKey= / sig=, passwords in URLs (postgres://user:pass@host), Bearer tokens, and generic assignments (password=…, api_key: …, client_secret=…). References and placeholders (${TOKEN}, <key>, process.env.X, xxxx) are left alone. The rules live in hooks/patterns.ts.

Where

| Row | Behaviour | | --- | --- | | Assistant replies, your prompts | Masked, with hover reveal (a reply that contains a secret is drawn as plain text, not markdown) | | Bash output and other text results | Masked, with hover reveal (first 12 lines; ctrl+o shows the rest) | | Tool call arguments, structured results, messages from other agents | Masked, no reveal |

Masking only changes what the screen shows. The model and the transcript file still see the real values.

Hover needs a surface that reports the pointer: the desktop app, or the terminal's fullscreen layout.

Other works with the same name

Similar projects

ruvnet@ruvnet

AgentBBS cross-host agent federation for ruflo (ADR-164). Phase 1 exposes room coordination — federation_bbs_register / federation_bbs_publish / federation_bbs_watch / federation_bbs_human_join. Phase 2 (v3.40.0) adds signed cross-host federation — federation_bbs_identity (persistent Ed25519 node identity), federation_bbs_peer_add (pin a peer by nodeId + public key), federation_bbs_peers (audit/unpin), federation_bbs_serve (read-only pull endpoint), and federation_bbs_sync (pull pinned peers and union-merge what verifies). Every merged envelope is Ed25519-verified against a pinned key; unsigned/misattributed/oversize/over-hop envelopes are dropped and counted. Transport is HTTP pull and works on any network (Tailscale, LAN, VPN, loopback) — no tailnet required. Coordinates work ownership via claim messages (ClaimIssued/Released/Handoff/Ack). agentbbs lives in optionalDependencies; every handler gracefully degrades to {degraded:true} when the package is missing (ADR-150 pattern). As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.

claude / ruflo-bbs-federation
❯ /ruflo-bbs-federation
▰▰▰▰▰▰▰▰ Security & privacy
✳︎ ruflo-bbs-federation
└─ Make every conversation easier
Text preview · Not a project screenshot
GitHub repositoriesSecurity & privacy

ruflo-bbs-federation

Stars 73.9KPermission footprint L2