dispatch-pilot

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

subagent spawns, every prompt, /"(?:)"/ calls, Read calls, Agent calls, Workflow calls

Hooks

turn.start {turnId=/"(?:)"/}, agent.spawn {tool_use_id=/"(?:)"/}, turn.complete {turnId=/"(?:)"/}, ui.render {component=AbovePrompt}, ui.render {component=SessionMode}, ui.render {component=Pane, requestId=?}, turn.start {turnId=/"(?:)"/}, agent.spawn {tool_use_id=/"(?:)"/}, session.start {cwd=/"(?:)"/}, session.measure {context has {window=/"(?:)"/}, command.run {command=dp}, prompt.submit {text=/"(?:)"/}, session.end {reason=/"(?:)"/}, session.start {cwd=/"(?:)"/}, turn.complete {turnId=/"(?:)"/}, tool.call {tool=/"(?:)"/}, turn.step {turnId=/"(?:)"/}, tool.call {tool=Read}, prompt.submit {text=/"(?:)"/}, session.append {door=/"^(?:prompt|queue)$"/}, tool.call {tool=/"(?:)"/}, turn.step {turnId=/"(?:)"/}, prompt.submit {text=/"(?:)"/}, tool.call {tool=Agent}, agent.spawn {tool_use_id=/"(?:)"/}, tool.call {tool=Workflow}, tool.describe {tool=Workflow}, tool.call {tool=Workflow}, agent.spawn {tool_use_id=/"(?:)"/}, session.start {cwd=/"(?:)"/}, session.start {cwd=/"(?:)"/}

API calls

$.agent.list, $.clock.after, $.clock.now, $.clock.sleep, $.command.list, $.command.register, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.stat, $.http.fetch, $.model.complete, $.process.run, $.prompt.fill, $.session.cwd, $.session.id, $.session.messages, $.session.usage, $.settings.read, $.state.get, $.state.set, $.store.delete, $.store.get, $.store.keys, $.store.set, $.tool.register, $.ui.close, $.ui.invalidate, $.ui.log, $.ui.open, $.ui.panes, $.ui.resolve, $.ui.toast, $.ui.view

Validation on 2.1.302

Passed

Scanned revision

6f97fbf3fa1f

Marketplace passed

alex-mods

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. dispatch-pilot/hooks/decision/redact.ts:30, dispatch-pilot/hooks/decision/redact.ts:31, dispatch-pilot/hooks/decision/workflow-script.ts:516, dispatch-pilot/hooks/decision/workflow-script.ts:523, dispatch-pilot/hooks/decision/workflow.ts:469

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.