All Claude Code modsanthropics/claude-code
telemetry
Plugin analytics: hooks $.telemetry's two events, so a plugin logs an event or marks a feature's use as a first-party row, sent in batches with the session's own credential.
telemetry reaches L3 (network) and fails claude plugin validate on Claude Code 2.1.302: modules../register.ts: its hooks stand on the telemetry stream "anthropic" (a matcher names it, or a telemetry hook names no "to" and so stands on every stream….
- Events hooked: 6
- API methods referenced: 17
- Access from classified calls: L3, network: network, runs processes, reads files, reads env vars, reads settings, reads the transcript, draws
- Static scan, not a runtime test
It ships inside Claude Code, so there is nothing to install.
Access
L3 Uses the networknetwork, runs processes, reads files, reads env vars, reads settings, reads the transcript, drawsValidation
fails on 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Only what it hooks
- Hooks
telemetry.*, telemetry.log, telemetry.mark, session.start, session.end, engine.create- API calls
$.clock.after, $.clock.sleep, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.http.fetch, $.process.run, $.session.authorize, $.session.cwd, $.session.id, $.session.model, $.session.repo, $.session.surfaces, $.session.version, $.settings.read, $.ui.log- Validation on 2.1.302
- fails on 2.1.302
- Validator output
- modules../register.ts: its hooks stand on the telemetry stream "anthropic" (a matcher names it, or a telemetry hook names no "to" and so stands on every stream), which is for the plugins built into the CLI; name the collector on each telemetry hook: on("telemetry.log", { to: "collector" }, hook); ./register.ts hooks: telemetry.*, telemetry.log, telemetry.mark, session.start, session.end, engine.create; ./register.ts gating hook with .catch: telemetry.*; ./register.ts gating hook without .catch: telemetry.log; ./register.ts gating hook without .catch: telemetry.mark; ./register.ts calls: $.clock.after, $.clock.sleep, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.http.fetch, $.process.run, $.session.authorize, $.session.cwd, $.session.id, $.session.model, $.session.repo, $.session.surfaces, $.session.version, $.settings.read, $.ui.log; ./register.ts env writes: nothing; ./register.ts env reads: ALACRITTY_LOG, APP_URL, AWS_EXECUTION_ENV, AWS_LAMBDA_FUNCTION_NAME, AZURE_FUNCTIONS_ENVIRONMENT, BUILDKITE, C9_PID, C9_USER, CF_PAGES, CI, CIRCLECI, CLAUBBIT, CLAUDE_AGENT_SDK_VERSION, CLAUDE_CODE_ACTION, CLAUDE_CODE_CONTAINER_ID, CLAUDE_CODE_CUSTOM_OAUTH_URL, CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC, CLAUDE_CODE_ENTRYPOINT, CLAUDE_CODE_HOST_PLATFORM, CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST, CLAUDE_CODE_REMOTE, CLAUDE_CODE_REMOTE_ENVIRONMENT_TYPE, CLAUDE_CODE_REMOTE_SESSION_ID, CLAUDE_CODE_SESSION_ACCESS_TOKEN, CLAUDE_CODE_TAGS, CLAUDE_CODE_USE_ANTHROPIC_AWS, CLAUDE_CODE_USE_ANTHROPIC_GOOGLE_CLOUD, CLAUDE_CODE_USE_BEDROCK, CLAUDE_CODE_USE_FOUNDRY, CLAUDE_CODE_USE_GATEWAY, CLAUDE_CODE_USE_MANTLE, CLAUDE_CODE_USE_VERTEX, CLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR, CLAUDE_CONFIG_DIR, CLAUDE_SESSION_INGRESS_TOKEN_FILE, CODER, CODER_WORKSPACE_NAME, CODESPACES, COMSPEC, CURSOR_TRACE_ID, ConEmuANSI, ConEmuPID, ConEmuTask, DAYTONA_WS_ID, DENO_DEPLOYMENT_ID, DEVPOD, DEVPO… [+980 chars]; ./register.ts hooks telemetry for: anthropic, collector
- Scanned revision
c017428c8c27
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from anthropics/claude-code
- agents-mdAGENTS.md as project instructions, by one option. Under claude-md-or-agents-md a project with no instruction…
- diffThe diff pane as a plugin: /diff opens the session's uncommitted changes beside the transcript, file by file…
- sec-defaultSecurity default for organizations: seated outermost, it keeps the organization's classic hooks, prompt conte…