secrets plugins

by Claude Code Plugins

Manage environment configurations and secrets across deployments

by Claude Code Plugins

Integrate with secrets managers (Vault, AWS Secrets Manager, etc)

by Jeremy Longshore

Scan codebase for exposed secrets, API keys, passwords, and sensitive credentials

by Claude Code Plugins

Manage environment configurations and secrets across deployments

by Claude Code Plugins

Integrate with secrets managers (Vault, AWS Secrets Manager, etc)

by Claude Code Plugins

Manage environment configurations and secrets across deployments

by Claude Code Plugins

Integrate with secrets managers (Vault, AWS Secrets Manager, etc)

by Agent Guard contributors

Local-by-default, no-telemetry hooks inspect user prompts, supported tool inputs, outputs, and changed files in every enabled Claude Code or Codex session to block or mask secret leaks. Includes opt-in PII filtering and Git/CI backstops.

by Mehmet Turac

Pre-commit secret scanner (pattern + entropy).

by Ross Young

Agentic-Security: SAST + SCA + secrets + IaC + LLM-sec scanner with deterministic fix toolchain. Exposes a Model Context Protocol (MCP) server with 17 tools that Codex CLI can call directly.

by ScaleVector GmbH

Shared rules, secrets handling, and workspace MCP for dlthub

by Sven Roth

Security scanning via Aikido API with automated remediation loop

by Christopher Boone

Best practices for handling user-provided secrets in CLI tools: secure input methods, credential storage, secret masking, and language-specific libraries.

by Christopher Boone

Best practices for handling user-provided secrets in CLI tools: secure input methods, credential storage, secret masking, and language-specific libraries.

by Christopher Boone

Set up secret scanning with gitleaks and TruffleHog GitHub Actions workflows and optional gitleaks configuration.

by Christopher Boone

Set up secret scanning with gitleaks and TruffleHog GitHub Actions workflows and optional gitleaks configuration.

by Jordan Richlen

Before any call that transmits repo or user content off-machine (posting a comment, pushing a branch, calling an external API with file contents in the payload), state what is being sent and to whom — permission modes gate the call, this gates the content. Use whenever output leaves the machine to a destination the user didn't name in this task.

by Kyle Chalmers

Data + AI security audits for data professionals — cited, severity-ranked findings for AI tool configs, secrets exposure, data classification, and warehouse access.

by Karl Isenberg

Blocks secrets and PII before they reach the API: scans the prompt, a Read path, a Bash command, and the files each one would open, then denies the call rather than letting it cross.