nexus

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

? calls, every tool call, /"^(TodoWrite|TaskCreate|TaskUpdate)$"/ calls, classic hooks, compaction, subagent spawns, every prompt

Hooks

session.start, command.run {command=sessions-nexus}, command.run {command=idea-nexus}, command.run {command=rollback-nexus}, command.run {command=preview-nexus}, command.run {command=nexus}, command.run {command=handoff-nexus}, command.run {command=commit-nexus}, command.run {command=context-nexus}, command.run {command=enhance-nexus}, command.run {command=agents-nexus}, command.run {command=mcp-nexus}, command.run {command=lean-nexus}, command.run {command=lean-review-nexus}, command.run {command=compress-nexus}, command.run {command=provider-nexus}, ui.close {id=?}, tool.describe, config.set {key=theme}, command.run {command=skin-nexus}, tool.call {tool=?}, tool.call {tool=?}, tool.call, session.append, session.measure, turn.step, tool.call {tool=/"^(TodoWrite|TaskCreate|TaskUpdate)$"/}, turn.start, turn.complete, classic.Notification, session.compact, classic.PostCompact, session.end, agent.spawn, prompt.submit, prompt.compose, classic.Stop, ui.render {component=AbovePrompt}

API calls

$.agent.list, $.clock.after, $.clock.every, $.clock.now, $.clock.sleep, $.command.list, $.command.register, $.command.run, $.config.list, $.config.set, $.env.get, $.env.set, $.fs.exists, $.fs.list, $.fs.read, $.fs.stat, $.fs.write, $.http.fetch, $.model.complete, $.model.fork, $.process.run, $.process.spawn, $.prompt.fill

Validation on 2.1.304

Passed with warnings

Scanned revision

a07cdcbc5f0f

Marketplace passed

nexus-mod

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. hooks/lean.ts:215, hooks/register.tsx:601

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.