rules-enforcer

What it hooks into

From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.

Events

tool.callskill.promptclassic.SessionEndclassic.PostCompactsession.startclassic.UserPromptSubmitclassic.Stopclassic.SubagentStopcommand.run

API calls

$.clock.now$.command.register$.env.get$.fs.exists$.fs.list$.fs.read$.fs.stat$.process.run$.session.cwd$.state.get$.state.set$.store.get$.store.set$.tool.register$.ui.notice$.ui.status$.ui.toast

Can see

Edit callsWrite callsNotebookEdit callsBash callsMonitor callsSkill callsevery skillclassic hooksmcp__rules-enforcer__waive_doc_update calls

Reach

level 2 of 3 runs processesdrives Claudereads filesreads env varsreads mod statepersists statedraws