aitools

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

compaction, every prompt, subagent spawns, Monitor calls, TaskStop calls, Workflow calls, ? calls, every tool call

Hooks

session.start, turn.start, session.measure, turn.step, turn.complete, command.run {command=aitools}, command.run {command=taskview}, command.run {command=cleanview}, command.run {command=keepwarm}, session.compact, command.run {command=handoff}, command.run {command=askme}, ui.render {component=Pane, requestId=handoff}, prompt.submit, agent.spawn, prompt.attachment {type=queued_command}, tool.call {tool=Monitor}, tool.call {tool=TaskStop}, tool.call {tool=Workflow}, tool.call {tool=?}, command.run {command=tasks}, command.run {command=branches}, ui.render {component=Pane, requestId=?}, ui.render {component=Pane, requestId=?}, ui.render {component=Pane, requestId=?}, ui.render {component=Pane, requestId=?}, ui.render {component=Pane, requestId=notes}, ui.message, ui.close, tool.call, ui.render {component=Pane}, tool.call {tool=?}, tool.call {tool=?}, ui.render {component=ToolUse}, ui.render {component=ToolResult}, ui.render {component=ToolGroup}, ui.render {component=ToolProgress}

API calls

$.agent.list, $.clock.after, $.clock.every, $.clock.now, $.command.register, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.write, $.model.fork, $.process.run, $.process.spawn, $.prompt.fill, $.prompt.read, $.prompt.submit, $.session.cwd, $.session.id, $.session.messages, $.session.model, $.session.root, $.session.surfaces, $.session.usage

Surface modules

src/noteseditor.tsx

Validation on 2.1.302

Passed

Scanned revision

37963c8b286d

Marketplace passed

claude-aitools

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. plugins/aitools/src/project.tsx:325

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.