cc-inspect — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cc-inspect (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Comprehensive diagnostic view of the Claude Code runtime environment, session identity, plugin state, and system toolchain.
Run the diagnostic script:
bash "${RUNE_PLUGIN_ROOT}/scripts/cc-inspect.sh"Fallback (outside plugin context):
bash plugins/rune/scripts/cc-inspect.shIf the user passes --section <name>, only show that section. Valid names: env, session, system, plugin, runtime, echoes, all (default).
If the user passes --json, present findings as structured key-value data.
#### Claude Code Core
| Variable | Description |
|---|---|
CLAUDE_CONFIG_DIR | Config directory override (default: ~/.claude) |
CLAUDE_SESSION_ID | Current session UUID — used for session isolation |
CLAUDE_PROJECT_DIR | Project root directory |
CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS | Agent Teams feature flag (1 = enabled) |
#### Plugin System
| Variable | Description |
|---|---|
CLAUDE_PLUGIN_ROOT | Absolute path to the active plugin directory (hook context only) |
RUNE_PLUGIN_ROOT | Bridged plugin root path (available in Bash() tool calls via CLAUDE_ENV_FILE) |
CLAUDE_PLUGIN_DATA | Plugin-scoped persistent data directory |
#### Rune-Specific
| Variable | Description |
|---|---|
RUNE_SESSION_ID | Rune workflow session ID (injected by SessionStart hook) |
RUNE_TRACE | Trace logging toggle (1 = enabled) |
RUNE_TRACE_LOG | Trace log file path |
RUNE_CLEANUP_DRY_RUN | Dry-run mode for cleanup hooks (1 = log only) |
#### Process & System
| Variable | Description |
|---|---|
PPID | Parent process ID (Claude Code PID — used for session isolation) |
HOME | User home directory |
USER | Current user name |
SHELL | User's default shell |
TMPDIR | Temporary directory (macOS sets this per-session) |
PATH | Executable search path (truncated for readability) |
CLAUDE_* variables with set/unset statusRUNE_* variablesCLAUDE_PLUGIN_ROOT / CLAUDE_PLUGIN_DATA not set: running outside plugin context (hook context)RUNE_PLUGIN_ROOT not set: SessionStart hook failed to inject (check CLAUDE_ENV_FILE)CLAUDE_CONFIG_DIR not set: using default ~/.claude (single-account setup)CLAUDE_SESSION_ID not set: older Claude Code version or non-interactive contextPPID mismatch between skill and hook: expected — hooks run via hook runner subprocess~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.