client-mask

What the scan recorded

Observed events

every prompt, the system prompt, every skill, every tool call

Hooks

session.start, session.end, prompt.submit, session.append, prompt.compose, prompt.context, prompt.attachment, skill.prompt, tool.describe, session.send, tool.call, turn.step, command.run {command=client-mask-view}, command.run {command=client-mask-edit}, turn.complete, ui.render {component=AssistantMessage}, ui.render {component=UserMessage}, ui.render {component=AbovePrompt}, ui.render {component=Pane, requestId=client-mask-view}

API calls

$.clock.every, $.clock.now, $.command.register, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.stat, $.fs.write, $.process.run, $.session.id, $.session.messages, $.state.get, $.state.set, $.ui.open, $.ui.resolve, $.ui.status, $.ui.toast

Validation on 2.1.302

Passed

Scanned revision

0c0ac8552982

Marketplace failed

claude-mods: plugins[6] plugin.json → types: Path not found: ./types/index.d.ts. The runtime loader will report this as a load failure.

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.