claude-who

What the scan recorded

Observed events

Only what it hooks

Hooks

session.start, turn.start, turn.complete, command.run {command=who}, ui.close {id=who-leaderboard}, ui.render {component=Pane}

API calls

$.clock.after, $.clock.every, $.clock.now, $.command.register, $.http.fetch, $.process.run, $.session.id, $.store.delete, $.store.get, $.store.keys, $.store.set, $.ui.close, $.ui.invalidate, $.ui.open, $.ui.resolve, $.ui.status

Validation on 2.1.302

fails on 2.1.302

Validator output

name: Plugin name "claude-who" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does. If this is one of Anthropic's own plugins, validate the marketplace that lists it.

Scanned revision

af28bec90a6c

Marketplace failed

claude-who: plugins[0].name: Plugin name "claude-who" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.