atlas

What the scan recorded

Observed events

the atlas:board skill, the atlas:stop skill, every prompt, mcp__atlas__atlas_open_points calls, mcp__atlas__atlas_reply calls, mcp__atlas__atlas_query calls, mcp__atlas__atlas_check calls

Hooks

session.start, skill.prompt {skill=atlas:board}, skill.prompt {skill=atlas:stop}, session.end, command.run {command=clear|resume}, prompt.submit, tool.call {tool=mcp__atlas__atlas_open_points}, tool.call {tool=mcp__atlas__atlas_reply}, tool.call {tool=mcp__atlas__atlas_query}, tool.call {tool=mcp__atlas__atlas_check}

API calls

$.clock.after, $.clock.every, $.clock.now, $.clock.sleep, $.fs.exists, $.fs.list, $.fs.stat, $.http.fetch, $.process.run, $.process.spawn, $.session.cwd, $.session.id, $.session.surfaces, $.store.delete, $.store.get, $.store.set, $.tool.register, $.ui.ask, $.ui.log, $.ui.status

Validation on 2.1.312

Passed with warnings

Scanned revision

928461a377db

Marketplace failed

bengous-plugins: plugins[0].name: Plugin name "claude-orchestration" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.; plugins[6].name: Plugin name "claude-meta-tools" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.; plugins[7].name: Plugin name "claude-settings-manager" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.