القائمة
Probe env propagation across 3 process tiers (§1.1). Compares which CLAUDE_* env vars are set in plugin-level hook vs skill frontmatter hook vs Bash tool subprocess.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Mac Cowork で、plugin-level SessionStart hook(host 側)から $CLAUDE_PLUGIN_DATA に書いた値が「別の chat session を跨いで」残るかを検証する probe。書き込み＆読み戻しは hook(persist.sh)側で行い、その結果は SessionStart の stdout として context に出る。この skill body は対比用に「VM Bash 側から DATA が見えるか／hook が書いたファイルを読めるか」を確認する。
Surfaces UPE_PROBE_* marker lines to test whether the plugin-level UserPromptExpansion hook fires on Cowork. Invoking this skill via slash is itself the trigger; compares against UserPromptSubmit and SessionStart controls.
Triggers the plugin-level PreToolUse hooks by running a sentinel bash command, to test (via session export) whether Cowork runs PreToolUse hook commands through cmd.exe or a POSIX shell, and whether the inline block pattern actually blocks the bash tool.
Surfaces the EXEC_* marker lines emitted by the plugin-level SessionStart hooks, which run hook commands in EXEC FORM (args present). Used to test whether exec form resolves ${CLAUDE_PLUGIN_ROOT} to a real path and exports it as an env var on Cowork, where shell form (§2.1/§2.2) failed both.
Shows what skill-body CLAUDE_PLUGIN_ROOT and friends substitute to on Mac Cowork, whether the VM Bash tool can use that path, and whether the Read tool can read a bundled file at that host path.
Proves whether a skill frontmatter PreToolUse Bash hook fires on Cowork by emitting only a block decision (no echo). A marked bash should be blocked even though no frontmatter stdout surfaces.
| name | 01-env-propagation |
| description | Probe env propagation across 3 process tiers (§1.1). Compares which CLAUDE_* env vars are set in plugin-level hook vs skill frontmatter hook vs Bash tool subprocess. |
| user-invocable | true |
| hooks | {"PreToolUse":[{"matcher":"Bash","hooks":[{"type":"command","command":"sid=\"${CLAUDE_SESSION_ID:-no-sid}\"; ver=\"${VERIFIER_VERSION_DIR:-v-unknown}\"; out_dir=\"$CLAUDE_PROJECT_DIR/findings/$ver/$sid\"; mkdir -p \"$out_dir\"; printf \"[01-FM %s] tag=fm-registered ROOT=[%s] DATA=[%s] PROJECT_DIR=[%s] OPT_HELLO=[%s] OPT_SECRET=[%s] SESSION_ID=[%s]\\n\" \"$(date -Iseconds)\" \"${CLAUDE_PLUGIN_ROOT:-(empty)}\" \"${CLAUDE_PLUGIN_DATA:-(empty)}\" \"${CLAUDE_PROJECT_DIR:-(empty)}\" \"${CLAUDE_PLUGIN_OPTION_HELLO_MESSAGE:-(empty)}\" \"${CLAUDE_PLUGIN_OPTION_API_SECRET:-(empty)}\" \"${CLAUDE_SESSION_ID:-(empty)}\" >> \"$out_dir/probe.log\""}]}]} |
§1.1 の env 伝播 3 階層を観測します。
次の bash を順に実行：
proj="${CLAUDE_PROJECT_DIR:-$PWD}"
ver="${VERIFIER_VERSION_DIR:-v-unknown}"
sid="${CLAUDE_SESSION_ID:-no-sid}"
out_dir="$proj/findings/$ver/$sid"
mkdir -p "$out_dir"
{
printf '[01-BODY %s] tag=alive-check\n' "$(date -Iseconds)"
printf '[01-BODY] CLAUDE_PLUGIN_ROOT=[%s]\n' "${CLAUDE_PLUGIN_ROOT-(unset)}"
printf '[01-BODY] CLAUDE_PLUGIN_DATA=[%s]\n' "${CLAUDE_PLUGIN_DATA-(unset)}"
printf '[01-BODY] CLAUDE_PROJECT_DIR=[%s]\n' "${CLAUDE_PROJECT_DIR-(unset)}"
printf '[01-BODY] CLAUDE_CODE_REMOTE=[%s]\n' "${CLAUDE_CODE_REMOTE-(unset)}"
printf '[01-BODY] CLAUDE_PLUGIN_OPTION_HELLO_MESSAGE=[%s]\n' "${CLAUDE_PLUGIN_OPTION_HELLO_MESSAGE-(unset)}"
printf '[01-BODY] CLAUDE_PLUGIN_OPTION_API_SECRET=[%s]\n' "${CLAUDE_PLUGIN_OPTION_API_SECRET-(unset)}"
printf '[01-BODY] CLAUDE_SKILL_DIR=[%s]\n' "${CLAUDE_SKILL_DIR-(unset)}"
printf '[01-BODY] CLAUDE_SESSION_ID=[%s]\n' "${CLAUDE_SESSION_ID-(unset)}"
printf '[01-BODY] CLAUDE_CODE_ENTRYPOINT=[%s]\n' "${CLAUDE_CODE_ENTRYPOINT-(unset)}"
printf '[01-BODY] CLAUDE_CODE_EXECPATH=[%s]\n' "${CLAUDE_CODE_EXECPATH-(unset)}"
printf '[01-BODY] ----- all CLAUDE_* -----\n'
env | grep '^CLAUDE_' | sort
} | tee -a "$out_dir/probe.log"
proj="${CLAUDE_PROJECT_DIR:-$PWD}"
ver="${VERIFIER_VERSION_DIR:-v-unknown}"
sid="${CLAUDE_SESSION_ID:-no-sid}"
echo "=== hooks.log tail (plugin-level env snapshot) ==="
tail -n 80 "$proj/findings/$ver/$sid/hooks.log"
echo
echo "=== probe.log tail (frontmatter + body env) ==="
tail -n 40 "$proj/findings/$ver/$sid/probe.log"
完了したら exit。./scripts/assert.sh 01 で 3 層の subclaim を判定します。