session-meter

What the scan recorded

Observed events

subagent spawns, every tool call, compaction

Hooks

session.start, turn.step, agent.spawn, tool.call, session.compact, session.measure, turn.complete, session.end, command.run {command=metrics}, ui.render {component=AbovePrompt}

API calls

$.clock.every, $.clock.now, $.command.register, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.write, $.process.run, $.session.id, $.session.model, $.session.repo, $.session.usage, $.settings.read, $.ui.invalidate, $.ui.log, $.ui.resolve

Validation on 2.1.312

Passed

Scanned revision

e7ee7a0857c5

Marketplace passed

s0ar-mods

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. hooks/register.js:301, hooks/register.js:312, hooks/register.js:316

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.