/plugin marketplace add https://vayleer.com/plugins/marketplace.json/plugin install keysafe@vayleerRun both commands inside Claude Code. The first adds the Vayleer marketplace once; after that every plugin here installs with one command.
KeySafe brings secret scanning into Claude Code. It checks every file edit, file read and git command before it happens. A live key written into a file git would commit is blocked, with a note to use an environment variable; the same key in a gitignored .env file is fine. Commits and pushes holding a live key are blocked.
It recognises more than 70 key formats, tells you where and how to rotate each one, asks before secrets files are read into the conversation, installs the same checks as git hooks for commits made outside Claude Code, and scans the repository and its history on demand.
No reviews yet.
Write the first reviewNo. It is a local Node script that decides on your machine.
Test-mode keys such as Stripe sk_test_ and obvious placeholders are allowed.
Rotate it first. KeySafe prevents new leaks; it cannot unpublish old ones.
Yes. KeySafe is free and MIT licensed.
In Claude Code run /plugin marketplace add https://plugins.dudelemon.cloud/marketplace.json, then /plugin install keysafe@dudelemon.
Claude Code hooks that block destructive commands and ask before risky ones
AI code review for Claude Code: security, accessibility and performance
Commit message generator for Claude Code, in your repository's own style
