security

A Claude Code guard mod that denies Edit, Write and NotebookEdit on secret locations (dotenv files, private keys, ~/.ssh, ~/.aws, ~/.gnupg, pass store) and on content carrying a credential shape, including passwords inside URLs. It also denies Bash writes to those paths and Bash reads that would print them. Ships with its own tests.

A Claude Code plugin that scans every text entering a conversation — prompts, tool results, subagent rows — and replaces detected API keys, cloud credentials and other secrets with meaningful placeholders before they reach the model.

A Claude Code plugin with a tool.call hook that blocks Write, Edit, MultiEdit, NotebookEdit and Bash redirections from putting real-looking credentials (AWS, Anthropic, OpenAI, GitHub, Slack, Stripe, Google keys, private keys, DB URLs with passwords) into files, while allowing placeholders, dev defaults and .env files.

AgentBBS cross-host agent federation for ruflo (ADR-164). Phase 1 exposes room coordination — federation_bbs_register / federation_bbs_publish / federation_bbs_watch / federation_bbs_human_join. Phase 2 (v3.40.0) adds signed cross-host federation — federation_bbs_identity (persistent Ed25519 node identity), federation_bbs_peer_add (pin a peer by nodeId + public key), federation_bbs_peers (audit/unpin), federation_bbs_serve (read-only pull endpoint), and federation_bbs_sync (pull pinned peers and union-merge what verifies). Every merged envelope is Ed25519-verified against a pinned key; unsigned/misattributed/oversize/over-hop envelopes are dropped and counted. Transport is HTTP pull and works on any network (Tailscale, LAN, VPN, loopback) — no tailnet required. Coordinates work ownership via claim messages (ClaimIssued/Released/Handoff/Ack). agentbbs lives in optionalDependencies; every handler gracefully degrades to {degraded:true} when the package is missing (ADR-150 pattern). As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.

A Baselane Claude Code guard that asks before a command prints environment variables, echoes a sensitive variable, or sends local data to a remote host.

Masks secrets (API keys, tokens, passwords, .env values) in tool output and prompts before Claude reads them

Claude Code mod that holds risky Bash commands (rm -r, force push, migrations) and shows what they would delete before running, cancelling after 60 s with no answer.

Secrets found by betterleaks reach the model as ‹secret:…› tokens; Write/Edit restore them, other tools refuse them

Shadow or enforce the existing Harness PreToolUse guards as function hooks

A Claude Code plugin that ships a git commit skill and gates every Bash git command against it — blocking commits made without the skill, blanket `git add`, AI signature trailers, secrets, ignored paths, and unrequested pushes or branch changes.

Put API keys and other secrets into any config file without them appearing in chat, shell history or tool output.

Keeps secrets out of transcripts: blocks shell reads of secret files, hides token values in tool output, and checks git add and push.