All Claude Code modsPromptSign/promptsign-plugin
promptsign
Verifies signatures on the instruction files Claude Code loads, meaning CLAUDE.md, skills, and agent definitions, before they reach model context. It re-checks a skill bundle before the Skill tool runs it. Sigstore keyless, offline verification against a pinned trust root, no telemetry.
promptsign reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 3
- API methods referenced: 3
- Access from classified calls: L2, writes or runs: runs processes, reads env vars, draws
- Static scan, not a runtime test
Install hint
/plugin install promptsign --marketplace PromptSign/promptsign-pluginFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsruns processes, reads env vars, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- every skill, the system prompt
- Hooks
skill.prompt, prompt.context, plugin.register {tier=user}- API calls
$.env.get, $.process.run, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
1191611067f9- Marketplace passed
- promptsign
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/PromptSign--promptsign-plugin--promptsign/)
[](https://mods.aidojo.si/mods/PromptSign--promptsign-plugin--promptsign/)