codynd

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

/"__cp_(start_patch|complete_patch|request_review|update_patch|reopen_patch|delete_patch|batch_update)$"/ calls, /"__cp_complete_patch$"/ calls, /"__cp_request_review$"/ calls, /"^Bash$"/ calls, /"__cp_start_patch$"/ calls, /"__cp_(complete_patch|request_review)$"/ calls, classic hooks, /"^AskUserQuestion$"/ calls, every prompt

Hooks

session.start, state.set, tool.call {tool=/"__cp_(start_patch|complete_patch|request_review|update_patch|reopen_patch|delete_patch|batch_update)$"/}, tool.call {tool=/"__cp_complete_patch$"/}, tool.call {tool=/"__cp_request_review$"/}, tool.call {tool=/"^Bash$"/}, session.start {isInteractive=true}, command.run {command=soundtrack}, tool.call {tool=/"__cp_start_patch$"/}, tool.call {tool=/"__cp_(complete_patch|request_review)$"/}, classic.Notification, tool.call {tool=/"^AskUserQuestion$"/}, tool.call {tool=/"^Bash$"/}, session.start {isInteractive=true}, prompt.submit, command.run {command=snooze}, session.start {isInteractive=true}, command.run {command=recap}, prompt.submit {origin has {kind=composer}, ui.render {component=AbovePrompt}, session.start {isInteractive=true}, command.run {command=park}, session.start {isInteractive=true}, command.run {command=patches}, command.run {command=fried}, ui.render {component=Pane, requestId=codynd-fried}

API calls

$.audio.play, $.clock.after, $.clock.every, $.clock.now, $.clock.sleep, $.command.register, $.env.get, $.fs.list, $.fs.read, $.fs.write, $.mcp.call, $.model.complete, $.model.fork, $.process.run, $.prompt.submit, $.session.cwd, $.session.root, $.session.version, $.state.get, $.state.set

Validation on 2.1.302

Passed

Scanned revision

5d9e772d0d38

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. hooks/reentry-card.tsx:24

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.