claudemods

All Claude Code modsanthropics/claude-code

sec-default

A Claude Code mod in anthropics/claude-code, built into Claude Code

Security default for organizations: seated outermost, it keeps the organization's classic hooks, prompt content, settings, tool policy and pinned environment out of reach of the plugins a person installs, and adds no policy of its own; one managed option, allowManagedModsOnly, limits mods to the organization's.

sec-default reaches L1 (reads) and passed claude plugin validate on Claude Code 2.1.302.

It ships inside Claude Code, so there is nothing to install.

Access

L1 Reads filesreads settings, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events
classic hooks, the system prompt, every skill, compaction, subagent spawns
Hooks
classic.*, prompt.section, prompt.context, prompt.attachment, prompt.compose, skill.prompt, attribution.text, session.append {door=attachment}, session.append {door=hook-context}, session.append {door=compaction}, session.append {door=tool-message}, session.append {door=note}, session.compact, settings.read, tool.describe, command.describe, agent.offer, agent.spawn, tool.register, tool.list, tool.check, ui.log, env.get, env.set, plugin.register {tier=user}
API calls
$.settings.read, $.ui.log
Validation on 2.1.302
Passed
Scanned revision
c017428c8c27

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

More from anthropics/claude-code