system1

What the scan recorded

Observed events

subagent spawns, mcp__system1__submit_plan calls, mcp__system1__confirm_plan calls, ? calls, every prompt, every skill, Agent calls

Hooks

session.start, agent.spawn, tool.call {tool=mcp__system1__submit_plan}, tool.call {tool=mcp__system1__confirm_plan}, tool.call {tool=?}, prompt.submit, skill.prompt, tool.call {tool=Agent}

API calls

$.agent.register, $.clock.now, $.clock.sleep, $.env.get, $.fs.list, $.fs.read, $.fs.stat, $.fs.write, $.http.fetch, $.process.run, $.session.cwd, $.tool.register, $.ui.ask, $.ui.status

Validation on 2.1.312

Passed

Scanned revision

c7cb9c90cd77

Marketplace passed

cch

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.