claudetto

What the scan recorded

Footprint

Unavailable or incomplete. Recorded events and calls below may omit access.

Observed events

subagent spawns, classic hooks, the system prompt, every prompt, compaction, Bash|Write calls, /"."/ calls, AskUserQuestion calls, Write|Edit|Bash calls, every tool call, /"^mcp__.+__(?:create|update)_pull_request$"/ calls

Hooks

agent.offer, agent.spawn {fork=false}, agent.spawn, classic.PermissionDenied, classic.SessionStart, classic.Stop {stop_hook_active=true|false}, classic.Stop, classic.SubagentStop, command.run {command=claudetto:gc}, command.run {command=handoff}, command.run {command=handoff-setup}, plugin.register, prompt.compose, prompt.section, prompt.submit {origin={kind}, kind, bridge, kind, sdk, prompt.submit, prompt.submit {origin={kind}, kind, bridge, kind, sdk, session.append, session.compact {trigger=auto|manual|plugin}, session.compact {trigger=auto|manual|plugin}, session.end, session.start {isInteractive=true|false}, session.start {isInteractive=true|false}, session.start {isInteractive=true|false}, session.start {isInteractive=true|false}, session.start, tool.call {tool=Bash|Write}, tool.call {tool=/"."/}, tool.call {tool=AskUserQuestion}, tool.call {tool=Write|Edit|Bash}, tool.call, tool.call {tool=/"^mcp__.+__(?:create|update)_pull_request$"/}

API calls

$.agent.list, $.clock.after, $.clock.now, $.clock.sleep, $.command.register, $.command.run, $.env.get, $.env.set, $.fs.exists, $.fs.list, $.fs.read, $.fs.stat, $.fs.write, $.http.fetch, $.model.complete, $.model.fork, $.process.run, $.prompt.submit, $.session.cwd, $.session.id, $.session.messages, $.session.model, $.session.surfaces, $.session.turns, $.session.usage, $.settings.read, $.tool.register, $.ui.log, $.ui.status

Validation on 2.1.302

Passed

Scanned revision

305546a7d8e9

Marketplace passed

claudetto

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.