project-sentinel

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

classic hooks, compaction, every prompt, the system prompt, /"^mcp__project-sentinel__milestones$"/ calls, /"^mcp__project-sentinel__decision_request$"/ calls, every tool call, subagent spawns

Hooks

session.start, session.end, classic.SessionStart, classic.UserPromptSubmit, session.attach, session.measure, session.compact, prompt.submit, prompt.context, prompt.compose, turn.start, turn.step, turn.complete, classic.PreModelSwitch, classic.PostModelSwitch, classic.PostToolBatch, session.append {door=attachment}, classic.Stop, classic.StopFailure, tool.call {tool=/"^mcp__project-sentinel__milestones$"/}, tool.call {tool=/"^mcp__project-sentinel__decision_request$"/}, tool.call, agent.offer, agent.spawn, command.run {command=control-room|cr}, ui.message, ui.close {id=?}, ui.render {component=AbovePrompt}, ui.render {component=Pane, requestId=?}, ui.render {component=ToolUse}, ui.render {component=ToolResult}, ui.render {component=ToolGroup}, ui.render {component=Spinner}, ui.render {component=SessionMode}

API calls

$.agent.list, $.clock.after, $.clock.every, $.clock.now, $.command.list, $.command.register, $.command.run, $.env.get, $.fs.exists, $.fs.read, $.fs.stat, $.model.classify, $.model.fork, $.process.run, $.process.spawn, $.prompt.fill, $.prompt.read, $.prompt.submit, $.session.compact, $.session.id, $.session.model, $.session.repo, $.session.root, $.session.send, $.session.surfaces, $.session.usage, $.session.version, $.settings.read, $.state.get, $.state.set, $.store.delete, $.store.get, $.store.set, $.tool.call, $.tool.check

Surface modules

hooks/kit.client.tsx

Validation on 2.1.302

Passed

Scanned revision

9b4d65052617

Marketplace passed

control-room

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. plugins/project-sentinel/hooks/features/digest.ts:91, plugins/project-sentinel/hooks/features/ops.ts:481, plugins/project-sentinel/hooks/features/permissions/shell.ts:125, plugins/project-sentinel/hooks/features/validation.ts:40, plugins/project-sentinel/hooks/features/validation.ts:41, plugins/project-sentinel/hooks/features/validation.ts:42, plugins/project-sentinel/hooks/features/validation.ts:43, plugins/project-sentinel/hooks/features/validation.ts:44, plugins/project-sentinel/hooks/features/validation.ts:45, plugins/project-sentinel/hooks/features/validation.ts:46, plugins/project-sentinel/hooks/features/validation.ts:47, plugins/project-sentinel/hooks/features/validation.ts:48, plugins/project-sentinel/hooks/features/validation.ts:54, plugins/project-sentinel/hooks/features/validation.ts:55, plugins/project-sentinel/hooks/features/validation.ts:57, plugins/project-sentinel/hooks/features/validation.ts:64, plugins/project-sentinel/hooks/features/validation.ts:65, plugins/project-sentinel/hooks/features/validation.ts:66, plugins/project-sentinel/hooks/features/validation.ts:67, plugins/project-sentinel/hooks/features/validation.ts:68, plugins/project-sentinel/hooks/features/validation.ts:69, plugins/project-sentinel/hooks/features/validation.ts:74, plugins/project-sentinel/hooks/features/validation.ts:79, plugins/project-sentinel/hooks/features/validation.ts:80, plugins/project-sentinel/hooks/features/validation.ts:81, plugins/project-sentinel/hooks/features/validation.ts:82, plugins/project-sentinel/hooks/features/validation.ts:83, plugins/project-sentinel/hooks/features/validation.ts:84, plugins/project-sentinel/hooks/features/validation.ts:85, plugins/project-sentinel/hooks/features/validation.ts:91, plugins/project-sentinel/hooks/features/validation.ts:92, plugins/project-sentinel/hooks/features/validation.ts:93, plugins/project-sentinel/hooks/features/validation.ts:94, plugins/project-sentinel/hooks/features/validation.ts:95, plugins/project-sentinel/hooks/features/validation.ts:96

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.