smartworkbench

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

every prompt, every tool call, classic hooks

Hooks

session.start, command.run {command=smartworkbench}, command.run {command=swb}, command.run {command=workbench}, prompt.submit, tool.call, turn.complete, classic.Stop, ui.render {component=Pane, requestId=smartworkbench}, ui.render {component=ToolUse}, ui.render {component=AbovePrompt}

API calls

$.agent.register, $.clock.after, $.clock.now, $.clock.sleep, $.command.register, $.command.run, $.config.list, $.config.set, $.fs.exists, $.fs.read, $.fs.stat, $.fs.write, $.process.run, $.process.spawn, $.prompt.submit, $.session.id, $.session.messages, $.session.root, $.session.usage, $.state.get, $.state.set, $.store.delete, $.store.get

Validation on 2.1.302

Passed

Scanned revision

72ba784f6227

Marketplace passed

smart-workbench

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. hooks/codex.ts:82, hooks/ledger.ts:44, hooks/ledger.ts:47, hooks/ledger.ts:402, hooks/register.tsx:988, hooks/register.tsx:995, hooks/risk.ts:18, hooks/risk.ts:29, hooks/risk.ts:45, hooks/risk.ts:71, hooks/risk.ts:79, hooks/risk.ts:88, hooks/risk.ts:96, hooks/risk.ts:105, hooks/risk.ts:123, hooks/risk.ts:157

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.