raven

What the scan recorded

Observed events

the system prompt, ? calls, every tool call, every prompt

Hooks

session.start, command.run {command=?}, ui.render {component=Pane}, ui.render {component=AbovePrompt}, ui.render {component=CommandOutput, props has {command=?}, ui.message, ui.scroll {requestId=?}, turn.complete, ui.close {id=?}, tool.describe {tool=?}, prompt.context, prompt.attachment {type=mcp_instructions_delta}, tool.call {tool=?}, tool.call, prompt.attachment {type=plan_mode|plan_mode_exit|plan_mode_reentry}, prompt.submit

API calls

$.clock.after, $.command.register, $.env.get, $.fs.read, $.model.fork, $.process.run, $.prompt.fill, $.prompt.submit, $.session.cwd, $.session.messages, $.settings.read, $.store.get, $.store.set, $.tool.register, $.ui.close, $.ui.focus, $.ui.invalidate, $.ui.log, $.ui.open, $.ui.panes, $.ui.resolve, $.ui.status, $.ui.toast

Surface modules

hooks/surface/strip.tsx

Validation on 2.1.303

Passed

Scanned revision

d7a8b2fbd2f5

Marketplace passed

raven

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. plugins/raven/hooks/git/changes.ts:16, plugins/raven/hooks/git/changes.ts:54, plugins/raven/hooks/git/load.ts:60, plugins/raven/hooks/review/comments.ts:108, plugins/raven/hooks/review/comments.ts:126, plugins/raven/hooks/views/doc-view.tsx:572, plugins/raven/hooks/views/tree/tree.ts:115

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.