claudemods

All Claude Code modsanthropics/claude-code

telemetry

A Claude Code mod in anthropics/claude-code, built into Claude Code

Plugin analytics: hooks $.telemetry's two events, so a plugin logs an event or marks a feature's use as a first-party row, sent in batches with the session's own credential.

telemetry reaches L3 (network) and fails claude plugin validate on Claude Code 2.1.302: modules../register.ts: its hooks stand on the telemetry stream "anthropic" (a matcher names it, or a telemetry hook names no "to" and so stands on every stream….

It ships inside Claude Code, so there is nothing to install.

Access

L3 Uses the networknetwork, runs processes, reads files, reads env vars, reads settings, reads the transcript, draws

Validation

fails on 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events
Only what it hooks
Hooks
telemetry.*, telemetry.log, telemetry.mark, session.start, session.end, engine.create
API calls
$.clock.after, $.clock.sleep, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.http.fetch, $.process.run, $.session.authorize, $.session.cwd, $.session.id, $.session.model, $.session.repo, $.session.surfaces, $.session.version, $.settings.read, $.ui.log
Validation on 2.1.302
fails on 2.1.302
Validator output
modules../register.ts: its hooks stand on the telemetry stream "anthropic" (a matcher names it, or a telemetry hook names no "to" and so stands on every stream), which is for the plugins built into the CLI; name the collector on each telemetry hook: on("telemetry.log", { to: "collector" }, hook); ./register.ts hooks: telemetry.*, telemetry.log, telemetry.mark, session.start, session.end, engine.create; ./register.ts gating hook with .catch: telemetry.*; ./register.ts gating hook without .catch: telemetry.log; ./register.ts gating hook without .catch: telemetry.mark; ./register.ts calls: $.clock.after, $.clock.sleep, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.http.fetch, $.process.run, $.session.authorize, $.session.cwd, $.session.id, $.session.model, $.session.repo, $.session.surfaces, $.session.version, $.settings.read, $.ui.log; ./register.ts env writes: nothing; ./register.ts env reads: ALACRITTY_LOG, APP_URL, AWS_EXECUTION_ENV, AWS_LAMBDA_FUNCTION_NAME, AZURE_FUNCTIONS_ENVIRONMENT, BUILDKITE, C9_PID, C9_USER, CF_PAGES, CI, CIRCLECI, CLAUBBIT, CLAUDE_AGENT_SDK_VERSION, CLAUDE_CODE_ACTION, CLAUDE_CODE_CONTAINER_ID, CLAUDE_CODE_CUSTOM_OAUTH_URL, CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC, CLAUDE_CODE_ENTRYPOINT, CLAUDE_CODE_HOST_PLATFORM, CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST, CLAUDE_CODE_REMOTE, CLAUDE_CODE_REMOTE_ENVIRONMENT_TYPE, CLAUDE_CODE_REMOTE_SESSION_ID, CLAUDE_CODE_SESSION_ACCESS_TOKEN, CLAUDE_CODE_TAGS, CLAUDE_CODE_USE_ANTHROPIC_AWS, CLAUDE_CODE_USE_ANTHROPIC_GOOGLE_CLOUD, CLAUDE_CODE_USE_BEDROCK, CLAUDE_CODE_USE_FOUNDRY, CLAUDE_CODE_USE_GATEWAY, CLAUDE_CODE_USE_MANTLE, CLAUDE_CODE_USE_VERTEX, CLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR, CLAUDE_CONFIG_DIR, CLAUDE_SESSION_INGRESS_TOKEN_FILE, CODER, CODER_WORKSPACE_NAME, CODESPACES, COMSPEC, CURSOR_TRACE_ID, ConEmuANSI, ConEmuPID, ConEmuTask, DAYTONA_WS_ID, DENO_DEPLOYMENT_ID, DEVPOD, DEVPO… [+980 chars]; ./register.ts hooks telemetry for: anthropic, collector
Scanned revision
c017428c8c27

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

More from anthropics/claude-code