sth-usage

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

subagent spawns, classic hooks, every prompt, /"^"/ calls

Hooks

session.start {isInteractive=true}, session.measure {changed=/"."/}, agent.spawn, turn.start {turnId=/"."/}, turn.complete {turnId=/"."/}, command.run {command=sth-context}, ui.press {plugin=sth-usage, element=open-context}, ui.render {component=Pane, requestId=sth-context}, session.start {cwd=/"^"/}, classic.CwdChanged {hook_event_name=CwdChanged}, prompt.submit {origin has {kind=/"^(composer|bridge|sdk)$"/}, turn.start {turnId=/"^"/}, tool.check {tool=/"^"/}, classic.PermissionRequest {hook_event_name=PermissionRequest}, classic.Notification {notification_type=permission_prompt}, tool.call {tool=/"^"/}, process.run {argv=/"^"/}, turn.complete {turnId=/"^"/}, command.run {command=sth-activity}, command.run {command=sth-resume}, ui.render {component=Pane, requestId=sth-activity}, ui.render {component=Pane, requestId=sth-resume}, session.start {isInteractive=true|false}, classic.CwdChanged {new_cwd=/"^"/}, command.run {command=sth-doctor}

API calls

$.agent.list, $.clock.after, $.clock.every, $.clock.now, $.command.list, $.command.register, $.command.run, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.stat, $.fs.write, $.http.fetch, $.process.run, $.prompt.fill, $.prompt.read, $.session.cwd, $.session.messages, $.session.root

Surface modules

ui/buddy.ts, ui/fika.ts

Validation on 2.1.302

Passed

Scanned revision

161b12789f1d

Marketplace passed

sth

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. mods/sth-usage/hooks/buddy-assets.ts:122

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.