All Claude Code modsbengous/claude-code-plugins
vellum
Plan at the frontiers and review the plan in the browser: decisions and interfaces before mechanics, vertical slices each closed by a check. /vellum:start opens a planning mode of its own: Claude writes the plan and its mockups and grills the reviewer on the open choices; the reviewer comments, edits or approves in a page, and the answer reaches Claude as a prompt.
marketplace fails
vellum reaches L3 (network) by its classified calls and passed claude plugin validate with warnings on Claude Code 2.1.302.
- Events hooked: 10
- API methods referenced: 23
- Access from classified calls: L3, network: network, sets env vars, drives Claude, reads files, reads env vars, persists state, draws
- Unclassified calls: 1 (
$.process.spawn), full access unknown - Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L3 Uses the networkother: $.process.spawn, network, sets env vars, drives Claude, reads files, reads env vars, persists state, drawsValidation
Passed with warnings on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- the vellum:start skill, the vellum:stop skill, mcp__vellum__submit calls, mcp__vellum__state calls, mcp__vellum__grill_ask|mcp__vellum__propose|AskUserQuestion calls, every prompt
- Hooks
session.start, skill.prompt {skill=vellum:start}, skill.prompt {skill=vellum:stop}, command.run {command=clear|resume}, ui.render {component=AbovePrompt}, tool.check, tool.call {tool=mcp__vellum__submit}, tool.call {tool=mcp__vellum__state}, tool.call {tool=mcp__vellum__grill_ask|mcp__vellum__propose|AskUserQuestion}, prompt.submit, session.append {door=prompt}, turn.start, turn.complete- API calls
$.agent.list, $.agent.spawn, $.clock.after, $.clock.every, $.clock.now, $.env.get, $.env.set, $.fs.stat, $.http.fetch, $.process.spawn, $.prompt.submit, $.session.cwd, $.session.id, $.session.root, $.store.delete, $.store.get, $.store.set, $.tool.call, $.tool.register, $.ui.invalidate, $.ui.log, $.ui.resolve, $.ui.status- Validation on 2.1.302
- Passed with warnings
- Scanned revision
fe31bc84664e- Marketplace failed
- bengous-plugins: plugins[0].name: Plugin name "claude-orchestration" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.; plugins[6].name: Plugin name "claude-meta-tools" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.; plugins[7].name: Plugin name "claude-settings-manager" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from bengous/claude-code-plugins
- todosShows the repository's TODOs in a scrolling band above the prompt, newest first: TODO.md items and TODO/FIXME…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/bengous--claude-code-plugins--vellum/)
[](https://mods.aidojo.si/mods/bengous--claude-code-plugins--vellum/)