I built a Claude Code mod in three files. Then I checked what a stranger's mod can reach.
On 5 October I typed /where into Claude Code, and Claude never saw it. My own code answered first, without a single call to the AI model. That code was a mod. Mods arrived in Claude Code on 1 October
Responses
Markdown supported · ⌘↵ to post
Vlad Zoff
Building Codapult and Codapult Guard
The
calls:inventory is a useful preflight check, but I'd also diff it between pinned mod versions in CI. An update that adds process, network or environment access should trigger review even when the visible feature hasn't changed. The inventory tells you which capability doors exist; a version-to-version diff makes newly added authority much harder to miss.