All Claude Code modsdavidcoulson/punch-list
punch-list
One to-do list of things waiting on you, shared by every Claude Code session: Claude adds an item whenever it tells you to do something, a band above the prompt shows what's open, and /todo lists, ticks off and snoozes them.
punch-list reaches L3 (network) and passed claude plugin validate on Claude Code 2.1.312.
- Events hooked: 5
- API methods referenced: 25
- Access from classified calls: L3, network: MCP servers, runs processes, writes files, drives Claude, reads files, reads env vars, reads mod state, persists state, draws
- Reads mod state: the scan does not record whose state, so this does not show that it reads another mod’s values
- Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L3 Uses the networkMCP servers, runs processes, writes files, drives Claude, reads files, reads env vars, reads mod state, persists state, drawsValidation
Passed on Claude Code 2.1.312View the source on GitHub Back to the list
What the scan recorded
- Observed events
- every prompt, mcp__punch-list__add calls, mcp__punch-list__done calls, mcp__punch-list__update calls, mcp__punch-list__list calls
- Hooks
session.start, prompt.submit, tool.call {tool=mcp__punch-list__add}, tool.call {tool=mcp__punch-list__done}, tool.call {tool=mcp__punch-list__update}, tool.call {tool=mcp__punch-list__list}, command.run {command=todo}, ui.render {component=AbovePrompt}, ui.render {component=Pane, requestId=punch-list}- API calls
$.clock.after, $.clock.every, $.clock.now, $.command.register, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.stat, $.fs.write, $.mcp.call, $.process.run, $.session.cwd, $.session.id, $.state.get, $.state.set, $.store.get, $.store.set, $.tool.register, $.ui.close, $.ui.open, $.ui.panes, $.ui.resolve, $.ui.status, $.ui.toast- Validation on 2.1.312
- Passed
- Scanned revision
64b28435a56e
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/davidcoulson--punch-list--punch-list/)
[](https://mods.aidojo.si/mods/davidcoulson--punch-list--punch-list/)