inbox

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

classic hooks, every prompt, mcp__inbox__record_finding calls, mcp__inbox__close calls, every tool call, the system prompt

Hooks

session.start, session.attach {surface=desktop}, classic.SessionStart {source=clear|resume|fork}, session.end, prompt.submit, turn.start, prompt.compose, tool.describe {tool=mcp__inbox__record_finding}, tool.call {tool=mcp__inbox__record_finding}, tool.describe {tool=mcp__inbox__close}, tool.call {tool=mcp__inbox__close}, tool.call, classic.PermissionRequest, classic.StopFailure, classic.Stop, turn.complete, prompt.context, session.append {door=prompt|delivery, origin has {kind=plugin, name=inbox}, session.append {door=command}, command.run {command=inbox}, ui.press, ui.scroll {requestId=inbox}, ui.message, ui.close {id=inbox}, ui.render {component=AbovePrompt}, config.set {key=theme}, ui.render {component=Pane, requestId=inbox}

API calls

$.clock.every, $.clock.now, $.clock.sleep, $.command.register, $.config.list, $.env.get, $.fs.exists, $.fs.stat, $.model.complete, $.model.fork, $.process.run, $.prompt.submit, $.session.append, $.session.id, $.session.messages, $.session.root, $.session.surfaces, $.session.turns, $.state.get, $.state.set, $.store.delete, $.store.get, $.store.keys, $.store.set, $.tool.register, $.ui.copy, $.ui.focus, $.ui.open, $.ui.panes, $.ui.resolve

Surface modules

hooks/fold-client.tsx, hooks/links-client.tsx, hooks/row-client.tsx, hooks/tabs-client.tsx, hooks/undo-client.tsx

Validation on 2.1.302

Passed with warnings

Scanned revision

ded6ecb2c617

Marketplace warnings

inbox

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.