All Claude Code modsucsandman/Agnostic-AI
claude-runtime
Shared Claude runtime adapter: normalises function-hook events into ClaudeRuntimeEvent, exposes $.runtime (emit bus, supports, judge, snapshot) to other plugins, and writes a JSONL event log
marketplace fails
claude-runtime reaches L3 (network) by its classified calls and fails claude plugin validate on Claude Code 2.1.302: name: Plugin name "claude-runtime" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "an….
- Events hooked: 10
- API methods referenced: 13
- Access from classified calls: L3, network: network, writes files, drives Claude, reads files, reads env vars, reads settings, persists state
- Unclassified calls: 1 (
$.runtime.emit), full access unknown - Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L3 Uses the networkother: $.runtime.emit, network, writes files, drives Claude, reads files, reads env vars, reads settings, persists stateValidation
fails on 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- every prompt, every tool call, subagent spawns
- Hooks
engine.create, runtime.judge, session.start, prompt.submit, turn.start, turn.step, tool.check, tool.call, agent.spawn, turn.complete- API calls
$.clock.every, $.env.get, $.fs.exists, $.fs.read, $.fs.write, $.http.fetch, $.model.complete, $.runtime.emit, $.session.id, $.session.model, $.session.usage, $.settings.read, $.store.set- Validation on 2.1.302
- fails on 2.1.302
- Validator output
- name: Plugin name "claude-runtime" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does. If this is one of Anthropic's own plugins, validate the marketplace that lists it.
- Scanned revision
aab09ff0d953- Marketplace failed
- harness-mods: plugins[0].name: Plugin name "claude-runtime" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from ucsandman/Agnostic-AI
- benderREALITY BENDER: intercepts a harmless tool result and alters what Claude receives; prints REAL vs RECEIVED
- blackboxBLACK BOX RECORDER: structured per-session timeline of prompts, model steps, tool calls, subagents and denial…
- costclaw-liveCOSTCLAW LIVE: per-request cost, cache decay and repeated-read detection while the session runs, and it serve…
- guardianGUARDIAN: executable policy that protects lab/demos/protected/** from Write/Edit/Bash, whatever CLAUDE.md says
- harness-modsHarness Mod layer: heartbeat/canary, native usage, rewrite explanations, measured subagent accounting, superv…
- matrixMATRIX: freezes a harmless tool call before it runs, shows what Claude intended, asks you, then continues or…
- probe-uiInteractive UI probe: ui.render components, toast, status, log, pane, command register
- probe2Interception probe: deny, rewrite, replace result, delay, throw, register tool, classify
- probe3Permission override, subagent visibility, agent.spawn model rewrite, turn.step routing, prompt context inject…
- prodguardPRODUCTION GUARD: ambient project/environment context + a transport-independent policy core (DashClaw evidenc…
- spike-compactSpike: does $.session.compact() work from a plugin, and what does the session.compact event carry?
- spike-describeSpike: does a tool.describe rewrite reach the model, does agent.offer hide a type, does prompt.suggest fire?
- spike-handoffSpike: safe-boundary handoff (bundle written at turn.complete from the runtime bus) and $.turn.abort semantics
- supervisorSUBAGENT SUPERVISOR: routing-and-budget Mod. Rewrites a spawn's model onto the capability graph instead of de…
- tunnel-costMIDDLEWARE TUNNEL stage 2: Cost analyzer: estimates the call's token cost from the args size
- tunnel-observerMIDDLEWARE TUNNEL stage 1: Observer: sees the call first, stamps t0, prints what enters
- tunnel-policyMIDDLEWARE TUNNEL stage 3: Policy: allows everything harmless; denies a matching rule
- tunnel-telemetryMIDDLEWARE TUNNEL stage 4: Telemetry: records the call and its result for the ledger
- xrayCLAUDE RUNTIME X-RAY: wildcard inspector with filters (/xray all|tools|subagents|session|usage|ui|errors|unkn…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/ucsandman--Agnostic-AI--claude-runtime/)
[](https://mods.aidojo.si/mods/ucsandman--Agnostic-AI--claude-runtime/)