All Claude Code modsucsandman/Agnostic-AI
harness-mods
Harness Mod layer: heartbeat/canary, native usage, rewrite explanations, measured subagent accounting, supervisor routing, secret redaction. Modes per guard in ~/.claude/mods/mods-config.json (classic | shadow_mod | mod).
marketplace fails
harness-mods reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 7
- API methods referenced: 14
- Access from classified calls: L2, writes or runs: writes files, reads files, reads env vars, persists state, draws
- Unclassified calls: 1 (
$.runtime.supports), full access unknown - Static scan, not a runtime test
To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.
Access
L2 Writes or runsother: $.runtime.supports, writes files, reads files, reads env vars, persists state, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- subagent spawns, every tool call, every prompt
- Hooks
session.start, runtime.emit, agent.spawn, tool.call, prompt.submit, turn.complete, command.run {command=mods}- API calls
$.command.register, $.env.get, $.fs.exists, $.fs.read, $.fs.stat, $.fs.write, $.runtime.supports, $.session.id, $.session.model, $.session.usage, $.store.get, $.store.set, $.ui.log, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
aab09ff0d953- Marketplace failed
- harness-mods: plugins[0].name: Plugin name "claude-runtime" is reserved: it passes as one of Anthropic's own. A third party's plugin name cannot start with "claude-", "anthropic-", "anthropics-", or "cc-plugin-", be "claude", "anthropic", "anthropics", "claude-code", or "claude-mods", or put "official" beside "claude" or "anthropic". Name it for what it does.
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from ucsandman/Agnostic-AI
- benderREALITY BENDER: intercepts a harmless tool result and alters what Claude receives; prints REAL vs RECEIVED
- blackboxBLACK BOX RECORDER: structured per-session timeline of prompts, model steps, tool calls, subagents and denial…
- claude-runtimeShared Claude runtime adapter: normalises function-hook events into ClaudeRuntimeEvent, exposes $.runtime (em…
- costclaw-liveCOSTCLAW LIVE: per-request cost, cache decay and repeated-read detection while the session runs, and it serve…
- guardianGUARDIAN: executable policy that protects lab/demos/protected/** from Write/Edit/Bash, whatever CLAUDE.md says
- matrixMATRIX: freezes a harmless tool call before it runs, shows what Claude intended, asks you, then continues or…
- probe-uiInteractive UI probe: ui.render components, toast, status, log, pane, command register
- probe2Interception probe: deny, rewrite, replace result, delay, throw, register tool, classify
- probe3Permission override, subagent visibility, agent.spawn model rewrite, turn.step routing, prompt context inject…
- prodguardPRODUCTION GUARD: ambient project/environment context + a transport-independent policy core (DashClaw evidenc…
- spike-compactSpike: does $.session.compact() work from a plugin, and what does the session.compact event carry?
- spike-describeSpike: does a tool.describe rewrite reach the model, does agent.offer hide a type, does prompt.suggest fire?
- spike-handoffSpike: safe-boundary handoff (bundle written at turn.complete from the runtime bus) and $.turn.abort semantics
- supervisorSUBAGENT SUPERVISOR: routing-and-budget Mod. Rewrites a spawn's model onto the capability graph instead of de…
- tunnel-costMIDDLEWARE TUNNEL stage 2: Cost analyzer: estimates the call's token cost from the args size
- tunnel-observerMIDDLEWARE TUNNEL stage 1: Observer: sees the call first, stamps t0, prints what enters
- tunnel-policyMIDDLEWARE TUNNEL stage 3: Policy: allows everything harmless; denies a matching rule
- tunnel-telemetryMIDDLEWARE TUNNEL stage 4: Telemetry: records the call and its result for the ledger
- xrayCLAUDE RUNTIME X-RAY: wildcard inspector with filters (/xray all|tools|subagents|session|usage|ui|errors|unkn…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/ucsandman--Agnostic-AI--harness-mods/)
[](https://mods.aidojo.si/mods/ucsandman--Agnostic-AI--harness-mods/)