interlock

What the scan recorded

Observed events

every prompt, Workflow calls, Bash calls, Skill calls, Read calls, Edit calls, Write calls, subagent spawns, classic hooks

Hooks

session.start, prompt.submit, session.receive {origin has {kind=task-notification}, tool.call {tool=Workflow}, tool.call {tool=Bash}, tool.call {tool=Skill}, tool.call {tool=Read}, tool.call {tool=Edit}, tool.call {tool=Write}, turn.step, turn.complete, agent.spawn, classic.SessionStart, ui.render {component=Spinner}, ui.render {component=Pane, requestId=interlock-meter}, ui.render {component=AbovePrompt}, ui.render {component=Pane, requestId=interlock-preflight}, ui.render {component=Pane, requestId=interlock-handoff}, ui.render {component=Pane, requestId=interlock-spec}, command.run {command=interlock-meter}, command.run {command=interlock-preflight}, command.run {command=interlock-handoff}, command.run {command=interlock-spec}

API calls

$.clock.every, $.clock.now, $.command.register, $.fs.read, $.session.usage, $.session.version, $.state.get, $.state.set, $.ui.invalidate, $.ui.log, $.ui.open, $.ui.resolve, $.ui.scroll, $.ui.status, $.ui.toast

Validation on 2.1.304

Passed

Scanned revision

11bc83b11dfc

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. hooks/mod.mjs:747, hooks/mod.mjs:780, hooks/mod.mjs:850

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.