All Claude Code modsanthropics/claude-code
agents-md
AGENTS.md as project instructions, by one option. Under claude-md-or-agents-md a project with no instruction files of its own gets its AGENTS.md files instead: a prompt.context hook asks $.fs.ancestors for every AGENTS.md and .claude/AGENTS.md from the filesystem root down to the working directory and hands them to the engine as project instruction files, which it renders, announces and withholds from agents exactly as it does CLAUDE.md, skipping any file the engine already loaded by import or link; a tool.call hook on Read attaches the ones under the project root as the engine attaches a nested CLAUDE.md. Under claude-md-and-agents-md every AGENTS.md is loaded beside CLAUDE.md. Under managed-only the project's and the person's instruction files are dropped and the organization's managed ones kept. Under claude-md the engine's walk stands alone. claude-md-or-agents-md is the default.
agents-md reaches L1 (reads) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 4
- API methods referenced: 7
- Access from classified calls: L1, reads: reads files, reads env vars, telemetry, draws
- Static scan, not a runtime test
It ships inside Claude Code, so there is nothing to install.
Access
L1 Reads filesreads files, reads env vars, telemetry, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- the system prompt, subagent spawns, Read calls
- Hooks
session.start, prompt.context {instructionFiles has {kind=?}, prompt.context, agent.spawn {fork=true}, tool.call {tool=Read}- API calls
$.env.get, $.fs.ancestors, $.session.cwd, $.session.root, $.telemetry.log, $.telemetry.mark, $.ui.log- Validation on 2.1.302
- Passed
- Scanned revision
c017428c8c27
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from anthropics/claude-code
- diffThe diff pane as a plugin: /diff opens the session's uncommitted changes beside the transcript, file by file…
- sec-defaultSecurity default for organizations: seated outermost, it keeps the organization's classic hooks, prompt conte…
- telemetryPlugin analytics: hooks $.telemetry's two events, so a plugin logs an event or marks a feature's use as a fir…