LeakStop
Stops secrets before Claude writes, prints or commits them, and can steer it to env vars.
Illustration. Actual results depend on the mod, terminal and environment.
Install
/plugin marketplace add AlexandreMartinezOlmos/claude-code-leakstop
/plugin install leakstop@leakstop
/reload-pluginsRun these commands one at a time in a Claude Code session.
claude plugin marketplace add AlexandreMartinezOlmos/claude-code-leakstop
claude plugin install leakstop@leakstopThen run /reload-plugins in your session, or start a new session.
Please install the Claude Code mod "LeakStop" (https://github.com/AlexandreMartinezOlmos/claude-code-leakstop). Before installing, read the Security and Requirements sections of its README and tell me what it reads and writes, which commands it runs, whether it uses the network, and which Claude Code version, OS and terminal it needs. If everything looks fine, run claude plugin marketplace add AlexandreMartinezOlmos/claude-code-leakstop and claude plugin install leakstop@leakstop, then remind me to run /reload-plugins in my session.Send this to Claude Code so it reads the author’s instructions before installing.
git clone https://github.com/AlexandreMartinezOlmos/claude-code-leakstop
cd claude-code-leakstop
claude --plugin-dir ./leakstopClone the repository and try it in a local session with --plugin-dir.
What it accesses
Based on the author’s documentation, checked when listed; use claude plugin validate to check for yourself.
Reads
YesReads files about to be written or opened, .leakstop.json, and large Bash output copies under tool-results.
Writes files
YesStores permanent-allow hashes in the plugin store; may rewrite masked secrets into tool-results copies.
Runs commands
YesRuns read-only git subcommands in the project and a bounded find.
Network
NoneIntroduction
LeakStop is a Claude Code function-hooks mod that inspects what Claude is about to write, print, commit or send, spots API keys, private keys, JWTs and Authorization headers, and asks you to block or allow—or rewrite a plain view of .env to names only. Secrets in tool results, your pasted prompt and large Bash transcripts are masked to a short prefix plus three trailing characters. It stays local: no network, no model calls, and it never reads your environment values. It runs read-only git and a bounded find, and stores permanent allows in the plugin store. Needs Claude Code 2.1.287+. Rule-based help, not a hard guarantee. Preview is illustrative.
Who it is for
- People worried Claude will write secrets into code, chat or git
Requirements
- Claude Code ≥ 2.1.287
- Rule-based assistance, not an absolute anti-leak guarantee.