Hook
Post-Edit Secrets Scan
Block writes that contain hardcoded API keys or placeholders.
Install
manual
add to ~/.claude/settings.json hooks.PostToolUse
Add this to your Claude Code MCP settings or run via the CLI.
About
PostToolUse hook on Edit/Write. Pattern-matches against AWS keys, OpenAI tokens, sk- prefixes, and "your-api-key-here" placeholders.
Common use cases
- •Block secret leaks
- •Catch placeholder strings
- •Pre-commit safety net
Tags
securitysecretsautomation