AI Nexus HubAI Nexus Hub
PostsQuestionsDiscussions

Command Palette

Search for a command to run...

AI Nexus Hub

CONTACT:
axc@cyberlogitec.com

Content
PostsQuestionsDiscussionsTopics
Stay in the loop

Weekly digest of the best AI posts. No spam.

© CLT 2026. All rights reserved.
Privacy
Posts  /  #AI  /  Claude code Mods
0
#AI

Claude code Mods

HL
Hung Lay
Oct 14, 2026 · 3 min read

Until now, almost every way to extend Claude Code worked from the outside. Settings hooks run a shell script on an event. Skills give Claude instructions. MCP servers give Claude tools. All useful, but none of them can touch the interface or step into what Claude Code is doing.

A mod runs inside Claude Code. It’s a plugin made of JavaScript or TypeScript event handlers, and Claude Code calls them when something happens: a tool call, a prompt you submit, or part of the screen being drawn.

That opens up a few things that weren’t possible before:

  • Draw your own UI, like a pane beside the transcript or a band above the prompt, with buttons and text fields

  • Restyle parts Claude Code draws itself, such as tool call rows or the spinner

  • Hold a tool call, rewrite it, or answer it without running the tool

  • Add a /command that runs your code instantly, even while Claude is working

A minimal mod is just three files: plugin.json, hooks.json, and register.js. The example in the docs counts tool calls and shows the count next to the spinner. One hook (tool.call) increments a variable. Another (ui.render) reads that variable and appends it to the spinner text. Because both hooks live in the same file, they share state for free. That’s the part that clicked for me.

Every hook runs before Claude Code acts on the event, so it gets to decide what happens next. It can:

  • Observe: log or count, then let the event continue unchanged

  • Rewrite: modify the event and pass it on

  • Answer: handle the event itself, so the default behavior never runs

Anything beyond that (drawing, reading files, network calls, calling a model) has to go through the mods API. That’s also why you can inspect a mod before installing it.

So when should you use which? My takeaway from the comparison table:

  • Use a skill when you keep pasting the same instructions

  • Use MCP when Claude needs to reach an external system

  • Use a settings hook when you just want to block, allow or log an event with a script you already have

  • Use a mod when you want UI, a custom command, or to rewrite what’s happening

One important caveat: mods are not sandboxed. They run with your permissions. That means a mod can read your files and env vars, see every prompt, and even auto-approve tool calls. Before installing one, run claude plugin validate ./some-mod to see which events it hooks and which calls it makes. Only install from sources you trust.

If you want to try it, Anthropic has sample mods in the claude-code-playground repo. Examples include token-weather (a context-window forecast above the prompt), blast-radius (holds risky commands like rm -rf or a force push and asks before running them), and replay-theater (steps through the last turn’s file edits). You need Claude Code v2.1.287+ in the terminal, or v2.1.286+ in the Desktop app.

Full docs: https://code.claude.com/docs/en/plugins/mods/overview

Has anyone here built a mod yet? I’m curious what people use them for.

##ai#ai#research
Y
Be kind. Markdown supported. · @ to mention

Related posts

Use the Claude Code extension in Cursor? Check your machine for the 2.1.312 / 2.1.313 backdoor in 2 minutes

TL;DR On 2026-10-29, malicious builds of the Claude Code extension (versions 2.1.312 and 2.1.313) were on the Cursor marketplace for about 11 hours. They tried

HLHung LayNov 2, 20261 min
0 0 0

Lock down any MCP server or agent command with one word: Anthropic's srt sandbox, no container needed

TL;DR srt is Anthropic's open-source sandbox CLI, the same engine that Claude Code's /sandbox mode is built on. Put srt in front of any command or local MCP ser

HLHung LayOct 29, 20261 min
0 0 1

Claude Code on Bedrock or Vertex with a custom model name? Keep the full system prompt after the 2.1.312 update with one setting

TL;DR What it is: Claude Code 2.1.312 (released 2026-10-27) now sends a shorter system prompt when your model name is one it does not recognize on Bedrock, Vert

HLHung LayOct 29, 20261 min
0 0 0

Turn Claude Code into a security auditor that checks its own findings: Cloudflare's security-audit skill, installed in 2 minutes

TL;DR What it is: cloudflare/security-audit-skill is one agent skill that makes Claude Code run a six-phase security audit, where a different agent tries to dis

HLHung LayOct 28, 20261 min
0 0 4

More from Hung Lay

Use the Claude Code extension in Cursor? Check your machine for the 2.1.312 / 2.1.313 backdoor in 2 minutes

TL;DR On 2026-10-29, malicious builds of the Claude Code extension (versions 2.1.312 and 2.1.313) were on the Cursor marketplace for about 11 hours. They tried

HLHung LayNov 2, 20261 min
0 0 0

Lock down any MCP server or agent command with one word: Anthropic's srt sandbox, no container needed

TL;DR srt is Anthropic's open-source sandbox CLI, the same engine that Claude Code's /sandbox mode is built on. Put srt in front of any command or local MCP ser

HLHung LayOct 29, 20261 min
0 0 1

Claude Code on Bedrock or Vertex with a custom model name? Keep the full system prompt after the 2.1.312 update with one setting

TL;DR What it is: Claude Code 2.1.312 (released 2026-10-27) now sends a shorter system prompt when your model name is one it does not recognize on Bedrock, Vert

HLHung LayOct 29, 20261 min
0 0 0

Turn Claude Code into a security auditor that checks its own findings: Cloudflare's security-audit skill, installed in 2 minutes

TL;DR What it is: cloudflare/security-audit-skill is one agent skill that makes Claude Code run a six-phase security audit, where a different agent tries to dis

HLHung LayOct 28, 20261 min
0 0 4