Secret Guard: a Hermes Agent plugin that keeps API keys out of AI chats and model output

Charles Clogston · 18H AGO

After my API keys and tokens were exposed repeatedly in chats with Claude, I built skills to enter secrets without showing them, plus guardrails to stop exposure. I packaged those as Secret Guard, a Hermes Agent plugin. It is for anyone who uses an AI agent with real credentials and wants to keep those keys away from the model. 1. Enter the key through a hidden dialog instead of the chat. The key is stored in the macOS keychain. 2. Tool calls that would read a key back are blocked before they run. 3. Any exact key value that shows up in tool output or model replies is scrubbed. Result: API keys stay out of everything the AI model sees. https://www.loom.com/share/c36f600ce8364a488ab3aed89e8ec157