ruflo-mods

A Claude Code mod in ruvnet/ruflo

ruflo as a Claude Code mod (function hooks, ADR-404): in-process prompt routing, edit learning signals, tighten-only tool checks from ruflo policy, the cost-tracker budget ladder, a mod trust gate for newly installed mods, and the $.ruflo noun other mods compose their status with. Opt-in and removable: the classic hook-handler hooks stay the default and take every event back whenever the mod is not loaded.

review UI rewrite

ruflo-mods reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.302.

Events hooked: 17
API methods referenced: 17
Access from classified calls: L2, writes or runs: writes files, sets env vars, reads files, reads env vars, reads settings, persists state, draws
Static scan, not a runtime test

Install hint

/plugin install ruflo-mods --marketplace ruvnet/ruflo

From the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runswrites files, sets env vars, reads files, reads env vars, reads settings, persists state, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: everything, /"^[\\s\\S]*$"/ calls, subagent spawns, every prompt, every tool call, compaction
Hooks: plugin.register, *, session.start {surface=/"^[\\s\\S]*$"/}, tool.call {tool=/"^[\\s\\S]*$"/}, tool.check {tool=/"^[\\s\\S]*$"/}, agent.spawn {description=/"^[\\s\\S]*$"/}, session.end {reason=/"^[\\s\\S]*$"/}, engine.create, session.start, command.run {command=ruflo-mods}, command.run {command=ruflo|ruflo-console}, prompt.submit, tool.check, tool.call, turn.complete, session.end, session.end {reason=/"^clear$"/}, session.measure, agent.spawn, tool.describe {tool=/"^mcp__(?:plugin_ruflo-core_ruflo|claude-flow|ruflo)__"/}, agent.spawn {subagentType=/"^.+$"/}, agent.offer, session.receive, session.send, session.compact
API calls: $.clock.after, $.clock.now, $.command.register, $.env.get, $.env.set, $.fs.exists, $.fs.read, $.fs.stat, $.fs.write, $.session.root, $.session.version, $.settings.read, $.store.get, $.store.set, $.ui.log, $.ui.status, $.ui.toast
Validation on 2.1.302: Passed
Scanned revision: 3bc6cfa6e532
Marketplace passed: ruflo
UI rewrite review: UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. plugins/ruflo-mods/hooks/guard/dangerous-command.ts:32, plugins/ruflo-mods/hooks/guard/dangerous-command.ts:160, plugins/ruflo-mods/hooks/guard/dangerous-command.ts:171, plugins/ruflo-mods/hooks/guard/dangerous-command.ts:200, plugins/ruflo-mods/hooks/guidance/screen.ts:72, plugins/ruflo-mods/hooks/toast/policy.ts:51, plugins/ruflo-mods/hooks/toast/policy.ts:52, plugins/ruflo-mods/hooks/toast/policy.ts:53, plugins/ruflo-mods/hooks/toast/policy.ts:54, plugins/ruflo-mods/hooks/toast/policy.ts:55, plugins/ruflo-mods/hooks/toast/policy.ts:57

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/ruvnet--ruflo--ruflo-mods-reach.svg)](https://mods.aidojo.si/mods/ruvnet--ruflo--ruflo-mods/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/ruvnet--ruflo--ruflo-mods-validates.svg)](https://mods.aidojo.si/mods/ruvnet--ruflo--ruflo-mods/)