carta-crm — 6 hooks

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-18

Run UTC: 2026-10-18T09:12:31Z
Reviewed: 2026-10-18
Published: 2026-10-18
Updated: 2026-10-18

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 6 hook declarations. Ran 87 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · hooks · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-18T09:12:31Z, tree cfc485abef147e646b4d7cb046f2eeb675758df011bfd1e59e94d02d7f8ff2f1.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: carta-crm — 6 hooks
slug: source-hooks-34c4b18aa788fe5239c7459d
type: hooks
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 6 hook declarations. Ran 87 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared hook names (listing.json): SessionStart; SessionStart; SessionStart; UserPromptSubmit; PreToolUse; PreToolUse"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/carta/plugins.git
documentation url: https://github.com/carta/plugins.git
commit: ea7fe1d4db0f0f273799ec4b40070c3c6b00fdcc
tree sha256: cfc485abef147e646b4d7cb046f2eeb675758df011bfd1e59e94d02d7f8ff2f1
file sha256: {"plugins/carta-crm/.claude-plugin/plugin.json":"ea272a620d0e3dc221ef5e55184f7d21b235c43ad692221ce2cddaed175587b7","plugins/carta-crm/README.md":"6e57a1b35edc34dd79176c6d982de4b60cc233d8dab232af2adc2a403b88704b","plugins/carta-crm/hooks/README.md":"311236f576274aea6c5aafcf50ab753836b6c6e0ddfa8fc3bc980a02a4837f8c","plugins/carta-crm/hooks/bin/SHA256SUMS":"f969c0946d71ac91c51b6a4039421450d59c19c0e693977a4ffe326900a964dd","plugins/carta-crm/hooks/bin/SOURCE.md":"2c0d3bd0b6e3eed4a6a670941a237b3d05dbeb0e971c7a429a59036ceca5d1b5","plugins/carta-crm/hooks/bin/hooks-darwin-amd64":"acea0488af485170165e3be98f23fbbb198abdb9f697a318ff5255de55c9ea2f","plugins/carta-crm/hooks/bin/hooks-darwin-arm64":"cc48ab1eb8e05ca6548eed67d8a40ef9e0df9f00125cc4617fd67ecba24c6cc4","plugins/carta-crm/hooks/bin/hooks-linux-amd64":"78d51a0203540ad59dd00c18977a0e601c5a686dbda7b3ce63721c7710108e00","plugins/carta-crm/hooks/bin/hooks-linux-arm64":"42df7c0e6db8ba6499a913b7bacc4fb8bea37529e87546437cbe824d582b0998","plugins/carta-crm/hooks/bin/hooks-windows-amd64.exe":"aa053174036420b6b91a62d27dd6a9d2d2c98d36405965603f23da2b94997342","plugins/carta-crm/hooks/dispatch.sh":"8d21b79ae1d47eeaf264c57e21da71a5c1293d22cc8ffcdbf1350098ef530abc","plugins/carta-crm/hooks/hooks.json":"c42f34a790a2db88c60908dedaf1cc000df8bfa05c96089bafd79c3181ff023c","plugins/carta-crm/hooks/src/.gitattributes":"7c16b8dd88084810be7fb9d3066ba8cca174211c4d1265bd50fa896c4ccea8c3","plugins/carta-crm/hooks/src/.go-version":"14c5f0cdd5bd79e9272abe3b788316012cd6bcabc5e4980f27634b2413857758","plugins/carta-crm/hooks/src/README.md":"60886ed7474efb114464e750c99be5bb122bc079a6fceefc0a2e3eda6b895041","plugins/carta-crm/hooks/src/build.sh":"6a330fce437e16dd544850adf5cf33a4088a793e81bf0607940444fff5735c14","plugins/carta-crm/hooks/src/detect-native.sh":"c68cc61a6510326a32345302f6d48aa62ea6ecc8e637477bb4216b3fb3832d37","plugins/carta-crm/hooks/src/dispatch.sh":"8d21b79ae1d47eeaf264c57e21da71a5c1293d22cc8ffcdbf1350098ef530abc","plugins/carta-crm/hooks/src/dispatch_shim_test.go":"e85cb2d53b1b2f93ac4eaace4bc89d6ef78ea11a8023c9c55be90e82cbf6f217","plugins/carta-crm/hooks/src/go.mod":"e8ed3ae86c355277d0ab49d80c99ab464466d01237cf89b25525ae2e30e6ea18","plugins/carta-crm/hooks/src/handlers/capture_model.go":"5190eeb02710d061bc6192f22141a4baf7b7080e56af09066a8e02b5943d8b74","plugins/carta-crm/hooks/src/handlers/capture_model_switch.go":"9a4fc39bff425c0c41b623b1453f3552c7ee4eb350b9889a0e56ad9e7446d160","plugins/carta-crm/hooks/src/handlers/capture_model_switch_test.go":"38fe06ecbb36f48986d718ad8f674592196a876399ee4c734669ee4bd928892e","plugins/carta-crm/hooks/src/handlers/capture_model_test.go":"66699ba42147501c6769d96582bcf229f91dcdffd30a6b35caa92ee35146a6b0","plugins/carta-crm/hooks/src/handlers/capture_skills.go":"9d8e41f8d18484338d0fce1e8b918d4eed5e8f9ab301d7d3b76c22d6e7047ee5","plugins/carta-crm/hooks/src/handlers/capture_skills_test.go":"169e8a070db732b713791d12bddbafe4b1ab0b897b616405614ed6f224d2614a","plugins/carta-crm/hooks/src/handlers/carta-cap-table/cache_commands.go":"65ebfe4aba10b2935c7a19c6873e82eb213dd208a38999223795a1ff47c1e53a","plugins/carta-crm/hooks/src/handlers/carta-cap-table/cache_commands_test.go":"b76a92cdc85702f309f1ddefa1966b6948cf0914628d8f0a317b750980d11b25","plugins/carta-crm/hooks/src/handlers/carta-cap-table/shared.go":"b2710a140afbfd7eca2a6098fa4625303cb2898987be2639b6b876cab65acad4","plugins/carta-crm/hooks/src/handlers/carta-cap-table/track_corporation.go":"51d2436800d4e7105c03faa5da056b7bb137f0a7201d1325dfb9cd514fbdc50f","plugins/carta-crm/hooks/src/handlers/carta-cap-table/track_corporation_test.go":"116aeb21115d58629acb3edafb19bf8b6f44d4f7e80ec997f7488f8cecbab82e","plugins/carta-crm/hooks/src/handlers/inject_context.go":"a26b9be6626fc840c86016f1ff577855d78f48273775a20be8b8acfb4bca6a32","plugins/carta-crm/hooks/src/handlers/inject_context_test.go":"53e510ce662aafc8144c2a90462b68e6b8b9504953590f966572a817ab4f377d","plugins/carta-crm/hooks/src/handlers/inject_instrumentation.go":"e040c870c121adb9fb1620a54ea68219275c817391792af0a150971480ec8b8c","plugins/carta-crm/hooks/src/handlers/inject_instrumentation_test.go":"59a9d9ca8394998c35683a5b37000505b0297dd4c274785e9ecbaf102ad24120","plugins/carta-crm/hooks/src/handlers/prune_session_data.go":"0e9e953533719df5d00ed595459dcc99143a4d865277336149320f8494990f52","plugins/carta-crm/hooks/src/handlers/prune_session_data_test.go":"0e97d31b721fc16b2f6056420253450b25ef5876e1e25e4ae363e94ee695c9ca","plugins/carta-crm/hooks/src/internal/hookio/hookio.go":"f551c7b94d2e504d581b385151104f3f832320aec95ce5e05a438bc639f5f07c","plugins/carta-crm/hooks/src/internal/plugin/plugin.go":"8b56c45015bddf487f8a2f2a6a4bc27bdf8333b23a1e42d0ce38b7fba560302a","plugins/carta-crm/hooks/src/internal/plugin/plugin_test.go":"3dbf0a5a05beaed8140a6182b49d08f72ad15d39f10ef8de1c21993be18c16f0","plugins/carta-crm/hooks/src/internal/session/session.go":"c0573ddf104fb9f8758fd0dbdf497726553b114a5e4de240f08c3b014e041cbf","plugins/carta-crm/hooks/src/internal/session/session_test.go":"648049e793108c41350e5f7244238daed022e3cd7d4cf16ac0451659ea1bd9a0","plugins/carta-crm/hooks/src/internal/tokenusage/tokenusage.go":"9247347ec4bcdd067033841558faec60f5f4c0b70ee900806087087e93a9146a","plugins/carta-crm/hooks/src/internal/tokenusage/tokenusage_test.go":"dfcd56ca5ed7dec13b0a22ad690c9fc39b8228208637dc5406ac7d4ea668cafc","plugins/carta-crm/hooks/src/main.go":"77c4d8d1629a3ec935d33988128e40163897f01f1911873873fd51a73c94205b","plugins/carta-crm/hooks/src/main_test.go":"0dd621d2b232f12574b2dd845aa09f6407e818812d1b0439d2ecfa2ea8caacd5","plugins/carta-crm/hooks/src/registry/registry.go":"d7c9b414a664327a697beb033ec9436a02d65d0e2f20bef06ba7ce546cd097b7","plugins/carta-crm/hooks/src/registry/registry_test.go":"3f569991fc0587b97c77d0c8f2c56dd094e829e40daaf1694904f2359f83e3bd","plugins/carta-crm/hooks/src/test.sh":"7a3204fb18cb191b90a092fbf1ba71d3a68aa5e1445a33dd245b2a43196e00d2","plugins/carta-crm/hooks/src/verify-checksums.sh":"317c9a928408dbc2ee0f404de5cc7442fdec14d41bd607825205929e7ebc4c8a","plugins/carta-crm/references/gate-carta-connector-name.md":"ddfe1f7431c0ba89577fa437fe052460e79b345d80aad4e503112656d8a79afb","plugins/carta-crm/references/gate-has-artifact-tool.md":"3f9f797d200e5ffe8c19c508ce3809b62d6f305f7064f0724a63aa7256455eed","plugins/carta-crm/skills/add-company/SKILL.md":"a75d075067919bcd477d650163d1f490f9859f27c596b1f58ab1b84c1caa22fa","plugins/carta-crm/skills/add-contact/SKILL.md":"16881d5f448f1a8c0938e5a14cb144fd2c3b4a1c3b3434566763c1133ffa0ffc","plugins/carta-crm/skills/add-deal/SKILL.md":"b8a6db803df718d1798081a84c2bed403e379e775040298b8415d9c3e4052ad2","plugins/carta-crm/skills/add-fundraising/SKILL.md":"9e96b5ae9f065524110f836d0c05d49b2b5b170b4ad21765df2fdf967c4dab6a","plugins/carta-crm/skills/add-investor/SKILL.md":"69860ac9c3099c816a8f9bb8781769f00faf14883682ef23d76cd1b56a7fbd66","plugins/carta-crm/skills/add-note/SKILL.md":"a99048891dcb994fb12a5f09137515149434e4877119051b41f18f0944e6cb6a","plugins/carta-crm/skills/carta-crm-home-build/SKILL.md":"2f00cfb593cb69b2f6b4b3c6bb03367b30442da543d6378f771861c72d93848f","plugins/carta-crm/skills/carta-crm-home-build/scripts/build_artifact.py":"740c17ff0e0e1d8c79eca480ba3b7deb8dbf3056509e0ba14bf4e5e5433c2736","plugins/carta-crm/skills/deal-flow-analytics/SKILL.md":"a638cb116315122d979b8bc5595dcecac020f17e3d071f719e2aad93673db5a8","plugins/carta-crm/skills/deal-flow-analytics/assets/dashboard-template.html":"39a540f5088a4aa7592a364f13de3c58b1f197026cbee6c861bebc776d820df6","plugins/carta-crm/skills/enrich-company/SKILL.md":"1b8cb17c08cae8f1651daa57a2b47361469d047b0614b8a5bf9c17e56e633b31","plugins/carta-crm/skills/get-angles/SKILL.md":"2f53a065e29d0a648d2cc27c947cbaabc09527547f9b38699eafd2ab4c09915e","plugins/carta-crm/skills/get-angles/assets/route-map.html":"6f01c3718e9aca71932f62326acb1095b4b5c89762927660a639a68e9ae6b86d","plugins/carta-crm/skills/home/SKILL.md":"5483cbdb605281f28a6a56fefc30768f11fb865234fe02e6243aa34d14bb1cd0","plugins/carta-crm/skills/prepare-for-meeting/SKILL.md":"b5dba39368a1e6e1e08cc029e5752806fb56711847bb851a8ab1555495cecfe6","plugins/carta-crm/skills/prepare-for-meeting/assets/brief-template.html":"8eb82a87695707a0e3e6a7a4b342232ce3ba8c57cd4e41397a1fd8d449fba41c","plugins/carta-crm/skills/search-companies/SKILL.md":"6d82d82a1bf0b4ad6ea561f3fa1562d26242b67d48ff5a81b8871ebc50f0e2b7","plugins/carta-crm/skills/search-contacts/SKILL.md":"4bca63e16303b3edb0978088db68cfbf0d3b1175b771e4e16d8da97ffd1febf1","plugins/carta-crm/skills/search-deals/SKILL.md":"3f588b6ae86401761f6efd9c7ce48714688f3840a8d89b6d7b038853c60072ce","plugins/carta-crm/skills/search-fundraisings/SKILL.md":"500cb3843763ede4ae4c82ca89cc88708f6e51bed5752c76dc71623cdeecd00d","plugins/carta-crm/skills/search-investors/SKILL.md":"134f48d6c5855a918f00f7626c90071d4a531b9e70f4814cb76b83e2c2767ed4","plugins/carta-crm/skills/search-notes/SKILL.md":"afab154140b9e083e22fd47efb3d85181bf74a99dee0e213f80b7048bc2ca374","plugins/carta-crm/skills/search-reports/SKILL.md":"ec3bfa12f021de19b5076033f21c364a903d7247e2a85bc27a4e8802d2f10199","plugins/carta-crm/skills/tutorial/SKILL.md":"359373be2d65720958e42075fce0de2bb2e3d9f7ace8d99abcd23b21772f66a7","plugins/carta-crm/skills/update-company/SKILL.md":"7228be655d6fada4280fe2448782cce590ce5b316f10a4ed5a7218fed0c5ceb4","plugins/carta-crm/skills/update-contact/SKILL.md":"fca538237e154a57eaf37e12ec99c8d5b1f9da11632533e4717722a4d9f918a1","plugins/carta-crm/skills/update-deal/SKILL.md":"06021cd70418576e2186263e95da7f614a1b44a199189526821bcf5429380bb9","plugins/carta-crm/skills/update-fundraising/SKILL.md":"95b994269855677c70854b1dc9f53611623037c0aaa899fa0889193d9928c0f5","plugins/carta-crm/skills/update-investor/SKILL.md":"c7b4e8a95b3e6846b17284d68147f389d94d845c16b1b2aa9ba07ba3f7454dbd","plugins/carta-crm/skills/update-note/SKILL.md":"331f11d0d77082865ed6b12f54d2e094f6bebfea1b09887f1b734eeb1e6bbd3f"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-18T09:12:31Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-18
reviewed date: 2026-10-18
published date: 2026-10-18
modified date: 2026-10-18
reviewer: Machine-checked
harness version: toolwitness harness at commit ce8871b5a9b1043f5ad9a568fb833cf91f333efa
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 87 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-18T09:12:31Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"carta-crm — 6 hooks","operatingSystem":"Not exercised","softwareVersion":"ea7fe1d4db0f0f273799ec4b40070c3c6b00fdcc"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 6 hook declarations. Ran 87 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared hook names (listing.json): SessionStart; SessionStart; SessionStart; UserPromptSubmit; PreToolUse; PreToolUse"}],"evidence_sha256":{"LOCK.json":"fef6d9270d6c9843973dc9229ac9ea5ae6dcfd845ead8099d11748e23b0f20bc","commands.json":"8ab994e6c8f9371c2d353e2ee24b4af2057c87d433d2dd9abef4ca1bae48098c","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"ce1da2901c8a3c0c4f499252e74b1994fe257ea98493448de1c54478879c68ea","listing.json":"24249cfda9bb93b35175dcb5b0e353f71b0ac03519cc3942a62047b3af3833e1","selection.json":"41766fd4a9c6175d70545cb5ea218f02b12fe89c6528308986313c43799abc62"},"identity_artifact":"identity.json"}
review: {"codex":"b5673a108996ca066a2e00a8f94db451bf55af6b78d91d3586bfb9dd089d0008","date":"2026-10-18","gates":"7e564b7fc5ea2cdfdab6c79f6106a799f1bdb9e5b14ba8c09ab1b51b920457e5","grok":"32443b15d8194cc17e408e24f7b7b4c85f176954ab22d9f32d7d5df3f8b9c18a","kind":"machine-checked","reviewed_sha256":"5a34be3a12bd8d213ad2eb9d52acb8b7f6258b537b422be972cecaeb415871a4","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 87 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "plugins/carta-crm/skills/add-company/SKILL.md",
        "name": "add-company",
        "description": "Adds one or more company records to the Carta CRM via the Carta CRM MCP Server. Use this skill when the user says things like \"add a company\", \"create company record\", \"add company to CRM\", \"add company to Carta CRM\", or \"/add-company\". Collects company information conversationally, then creates it via the MCP server.\n",
        "files": {
          "plugins/carta-crm/skills/add-company/SKILL.md": "a75d075067919bcd477d650163d1f490f9859f27c596b1f58ab1b84c1caa22fa"
        }
      },
      {
        "path": "plugins/carta-crm/skills/add-contact/SKILL.md",
        "name": "add-contact",
        "description": "Adds one or more contact records to the Carta CRM via the Carta CRM MCP Server. Use this skill when the user says things like \"add a contact\", \"create a contact record\", \"add contact to CRM\", \"save a contact\", \"upload contact to Carta CRM\", or \"/add-contact\". Collects contact information conversationally, then creates it via the MCP server. Only name is required — all other fields are optional.\n",
        "files": {
          "plugins/carta-crm/skills/add-contact/SKILL.md": "16881d5f448f1a8c0938e5a14cb144fd2c3b4a1c3b3434566763c1133ffa0ffc"
        }
      },
      {
        "path": "plugins/carta-crm/skills/add-deal/SKILL.md",
        "name": "add-deal",
        "description": "Creates one or more deal records in the Carta CRM via the Carta CRM MCP Server. Use this skill when the user says things like \"add a deal\", \"create a deal\", \"log a deal\", \"add deal to CRM\", \"add deal to Carta CRM\", or \"/add-deal\". Collects deal information conversationally, then creates it via the MCP server.\n",
        "files": {
          "plugins/carta-crm/skills/add-deal/SKILL.md": "b8a6db803df718d1798081a84c2bed403e379e775040298b8415d9c3e4052ad2"
        }
      },
      {
        "path": "

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-18