catalyst-by-zoho — 1 hook

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-18

Run UTC: 2026-10-18T12:13:01Z
Reviewed: 2026-10-18
Published: 2026-10-18
Updated: 2026-10-18

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 1 hook declaration. Ran 67 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · hooks · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-18T12:13:01Z, tree ad4c2713d4adfcb8f6b9d077b7c1df9b802843b262991287fda57b87ed2610b5.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: catalyst-by-zoho — 1 hook
slug: source-hooks-ba4bcc027ae7bd59275d647b
type: hooks
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 1 hook declaration. Ran 67 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared hook names (listing.json): SessionStart"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/catalystbyzoho/claude-plugin.git
documentation url: https://github.com/catalystbyzoho/claude-plugin.git
commit: 9670b79d72fe4923cc845ca0414d009ef3684ccb
tree sha256: ad4c2713d4adfcb8f6b9d077b7c1df9b802843b262991287fda57b87ed2610b5
file sha256: {".claude-plugin/marketplace.json":"0a98e783c96240cd18803609880dc3b7c700c4e30dc8590d81542ce03ff04caf",".claude-plugin/plugin.json":"2322b34ca338181d50dd3e180bcd11adbdacfcf09b7fa4a101c1a48a67958b19",".gitignore":"b604b0b0bff28fbfdf9f31c0c54ed1bbbb558df6bfe2d7da82caab62a31bb1d0",".mcp.json":"9e9d65488f4177f3bfcd7e6f25b61e295937a4060375d466e818dc7eb8f2bfa8","CATALYST.md":"c1e8da485c8f3f7188aef826a7c39f7f6982d4540401d34235e88d06a85bb8b7","LICENSE":"c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4","README.md":"e59ac8f6bf461b570322639f72614d1081fefaaec847ba15f5e15648d5d9e355","commands/switch-dc.md":"8331b5d86aa6b95ce8785b95ccf3822ae09a2ae6289f2edfad1430b37e30e0d3","hooks/catalyst-context.js":"cd23a15dc2ad52fa0b8e2065623af7a70e3ea25b065e1df569c421fd973bc36c","hooks/hooks.json":"3b3e870000c9ac58a55eb55ae15a8bdd3a1830847dd062e552850d0f4638e6fb","skills/catalyst-appsail/SKILL.md":"24f0138f59b88c07896e58cecbb4f985607f75db66f4934f33c6b8fefe0c6a45","skills/catalyst-appsail/references/appsail-basics.md":"71b67bdce935e78a62b5ecf0a5f2340c778300f6a7cb1a822ecc630212a31367","skills/catalyst-authentication/SKILL.md":"9e10a8449e2d1906f01189965cf390e51a5c6c7077d052f542b1b1cb548864ae","skills/catalyst-authentication/references/auth-basics.md":"d6535760fe4cdddfc5abd17205a36e9d4dd9047d941f75ddc5932a7301573261","skills/catalyst-authentication/references/connections.md":"2835d37f8943e2733bb268d264c5b87cce2279b24124c0b2cb29ce270f87b964","skills/catalyst-basics/SKILL.md":"6958a69b419f19ab3e89894765b90a470c0aa1b4c08e6aae773c3f65a19e8b0f","skills/catalyst-basics/references/architecture.md":"9a29a4ff3a742aa7259a67849fd740977d332872c667cccbe283e6e2bd45a7c1","skills/catalyst-basics/references/cli.md":"38f6075e24a42622927bbeb34d0029bc04ed603cefc427282edc31c780257636","skills/catalyst-basics/references/console-ui-guide.md":"17d7ae8cf8ea461ddcf7cc683073a28d7b1f1b2a57726547c1f15e4aa31bacac","skills/catalyst-basics/references/preflight.md":"7565a21311b7ec51b55ce68dae537cbfef3e1fc0d0564bae9e46a21b30c6dec6","skills/catalyst-basics/references/project-basics.md":"122ddfd63e0a40da2e0ea8ee4d084c65ec08e344133ef4beeb650cbf69711d6b","skills/catalyst-basics/references/quick-start.md":"aaa765fa7b030654f67daf8e778ca881f4f2147c1bf09633be1967f193b5b11a","skills/catalyst-basics/references/setup/claude-code.md":"b9503e6a856504ddfcca22874543c44aed2ce01084bc88a9fe3816725eb0889d","skills/catalyst-basics/references/setup/cursor.md":"1973f4fded301ef027a9954967fbd64eaa79281a95310ba848a7de219c40b8ac","skills/catalyst-basics/references/setup/github-copilot.md":"b92d6560fed92270971d3efb3b5cefc2fdac19b706bf6299f5041a0339610fb3","skills/catalyst-basics/references/setup/setup-common.md":"6d07e64efae293a283054a5b5c0bc58668eab97fefe979ec5717776d894a215e","skills/catalyst-by-zoho/SKILL.md":"b930a344b680a5016e9dc28e6d1bfc6f5c096d247d907c5d098f531fd81b103e","skills/catalyst-by-zoho/references/skill-feedback.md":"0fa1c953e8179fa9b3e0e6e8e916f643b2b2f319ac1ffc2b6599c7cb78ac400b","skills/catalyst-cache/SKILL.md":"a22b4a8f7586c0aa24c30fc23a976076c0a0cef0d2e529d549079415af090aab","skills/catalyst-cache/references/cache-basics.md":"48d6c4bd0f40161ca6be8cd08452d7e72f50632eef70fd791e99c5eb4043d59e","skills/catalyst-datastore/SKILL.md":"bf6dfaad14cce56fe555f5a4d14abdc5f1bb49e4d869b888f538421e943dfc5c","skills/catalyst-datastore/references/datastore-basics.md":"ad3d656bc82cb113ec06d0c9f83016bc61e5871b17a5df8b821ca4d081b74a19","skills/catalyst-functions/SKILL.md":"3fa7e1fdae9417df36323bc646efef65105e48256f8db386083f786d53856d55","skills/catalyst-functions/references/api-gateway.md":"91893747263f3e7e14b438caaf235cdc97745c474f6265e060cf6f2cf5fef1a9","skills/catalyst-functions/references/functions-advanced.md":"8b0a4bccb2102337772e3e64b58cff91df5edd173b1973607018282956df5321","skills/catalyst-functions/references/functions-basics.md":"672b45dfdb50c4b856dd09fb188cfccb1dc22122e28f398b69ac92cafe5d7cef","skills/catalyst-functions/references/functions-templates.md":"814d5f3bcbd07ce67d30f57efa15359d02cf47ef3118ebe328eaf4164c15d9f3","skills/catalyst-nosql/SKILL.md":"a45f4ae90ac50052b196511744b6f56a1ae1058920f496857e1584c82ac57bc7","skills/catalyst-nosql/references/nosql-basics.md":"558f31dba56c564780a8c8a91d4fea6c3d53e630ba7f54f2fb95568357ef7c7a","skills/catalyst-pricing/SKILL.md":"bf23f476dddde529e2fdeb50e08079adc7db405b0d088a3101e6bab2d8401744","skills/catalyst-pricing/references/pricing-basics.md":"294f6b8cf4cc976b8dcdce94c8d0411d5f76798f6b746386dfd7aaae91750a9c","skills/catalyst-sdk/SKILL.md":"08ecf156b2699698c2308fba062ce77b4c8fa1a663da42922030b71fe674c601","skills/catalyst-sdk/references/sdk-java.md":"7a717d92da0e50faa9fbee6b1aa8119ab2d58b927494b1a6a37f865b265cd785","skills/catalyst-sdk/references/sdk-mobile.md":"30ebe8ae3affb15200ccd2418547d7b2fe89c7546e3b5a7c9408aa06a4a84781","skills/catalyst-sdk/references/sdk-nodejs.md":"06821cf7fdb332c445a4f01630d10a85c8777bc8d763ce918e5978b7c1d4ff89","skills/catalyst-sdk/references/sdk-python.md":"a36eb9b754e4b72c0d34193a43e8f08b71b4eed2e3b7a4e9e1bfabc39c2bc70d","skills/catalyst-sdk/references/sdk-web.md":"76760193d5036f0bdb13b4fffda3560dba3cc2385ec844db02216911c5ecfa98","skills/catalyst-signals/SKILL.md":"4bffa525ffc2b1c32bea5c27b37847ca632a2a3c4308f7212d2108d15ef830ea","skills/catalyst-signals/references/signals-basics.md":"716fb50b82c9d3e19215b9cf416efd6802d093eb51f288be4f45a5a18bae7a62","skills/catalyst-slate/SKILL.md":"3bc2a27aa515d02caf4950bb78f4043c7a7e9e15e6609b16e57581d1c8bd8205","skills/catalyst-slate/references/slate-basics.md":"8656a83e93ee02c384ad0308b18bede17aa03f1408024c188317129e37045129","skills/catalyst-smartbrowz/SKILL.md":"ed9b0a611ee6d0096653a78f8f376f110b2ab4ec7ebd9939c5b7f5f44c748923","skills/catalyst-smartbrowz/references/smartbrowz-basics.md":"faa05d09fe54bfdc891789c7e61621ecd27194f2a729b06aabd8705a073ad843","skills/catalyst-stratus/SKILL.md":"b61c595ad593835551d136b1893364f1307f0f30b16f5e29fb1b75d976540c38","skills/catalyst-stratus/references/stratus-basics.md":"5cf959036b69d8b2bd8b90e5ab5ff4e15bb2c2bb14c47218cce70ce4b136575d","skills/catalyst-zia/SKILL.md":"cffec5f50246512045a97a38f4e67f752da85990df94a323fcaff7588fecce87","skills/catalyst-zia/references/quickml.md":"9e56ad2346283089e6b4fb7574b2a11a9cbeef7ed04de9b4b6b1bc3d41e53b10","skills/catalyst-zia/references/zia-services.md":"41caff7d2062a1b80a3cc85f44ed3f5275abc8c7651d84ff402c3c26f04a3c4e","skills/catalyst-zoho-mcp/SKILL.md":"a99a8615e972c97a1401297c7046350e169f86643f83261edb2968ee441dd2e9","skills/catalyst-zoho-mcp/references/dc-switching.md":"4241f617c1676beb4778effec3287f107cbaad597eccf4451526df95d0110b54","skills/catalyst-zoho-mcp/references/mcp-datastore.md":"5b1c5cacc9396046567bd839c4c7ef7ae26ef8c51fd1cbff57fbda284ca07217","skills/catalyst-zoho-mcp/references/zoho-mcp.md":"614b0c00b988e66acdf5bcfecb7a4fb373e5434d13f12181395dc38793202ae3"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-18T12:13:01Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-18
reviewed date: 2026-10-18
published date: 2026-10-18
modified date: 2026-10-18
reviewer: Machine-checked
harness version: toolwitness harness at commit 370a99e19f70b4b6aeaddd4a8dad4fccf774687d
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 67 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-18T12:13:01Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"catalyst-by-zoho — 1 hook","operatingSystem":"Not exercised","softwareVersion":"9670b79d72fe4923cc845ca0414d009ef3684ccb"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 hook declaration. Ran 67 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared hook names (listing.json): SessionStart"}],"evidence_sha256":{"LOCK.json":"7052f41776ab5883cf5bfd3c38cc5f51588a5c229cc5f484291a04b6d8965096","commands.json":"08213300a32535a852023c968d956570138cdf08922a33dc96458a523cfc73f6","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"016d6b9ba0d6f36616548a3d83de79b00fcba49e42ab4cb8f22647b801afecba","listing.json":"a2524efd2955d3663abd29ae026be5e295aa942361db7e9aacabfd48b90ade9c","selection.json":"41766fd4a9c6175d70545cb5ea218f02b12fe89c6528308986313c43799abc62"},"identity_artifact":"identity.json"}
review: {"codex":"db4e03d1761863ee3a92af6e2cc932f3eb7cc247b3757ed723fafc4278a4b9d8","date":"2026-10-18","gates":"9984f012bfb6ea80950be8029ae7943ad3cac5de71e58518c5c897834aaa32c4","grok":"d0ce059d450219f8081e37cb1d2e3c5d7a2b911ab185ee60c54097a34c6d4365","kind":"machine-checked","reviewed_sha256":"3aa684daab2735da707692e8385ea5138e7365db118979cc8dfeb32fa51c1c15","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 67 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/catalyst-appsail/SKILL.md",
        "name": "catalyst-appsail",
        "description": "Catalyst AppSail — persistent backend PaaS with managed runtimes (Node.js, Java, Python) and custom Docker containers. Trigger on 'AppSail', 'persistent server', 'Docker on Catalyst', 'X_ZOHO_CATALYST_LISTEN_PORT', or 'long-running process on Catalyst'. Do NOT use for stateless request/response handlers, event-driven functions, or scheduled jobs — use catalyst-functions instead.",
        "files": {
          "skills/catalyst-appsail/SKILL.md": "24f0138f59b88c07896e58cecbb4f985607f75db66f4934f33c6b8fefe0c6a45",
          "skills/catalyst-appsail/references/appsail-basics.md": "71b67bdce935e78a62b5ecf0a5f2340c778300f6a7cb1a822ecc630212a31367"
        }
      },
      {
        "path": "skills/catalyst-authentication/SKILL.md",
        "name": "catalyst-authentication",
        "description": "Catalyst Authentication — user login/signup, ZAID, Web SDK auth flows, and OAuth token management via Connections. Trigger on 'authentication', 'login', 'signup', 'getCurrentUser', 'ZAID', 'isUserAuthenticated', 'signOut', 'Connections', or 'getAccessToken'. You MUST load this skill whenever implementing user login or protecting data — ZAID differs between Development and Production and is the #1 cause of auth failures after environment promotion. For Security Rules (function invocation control), route to catalyst-functions.",
        "files": {
          "skills/catalyst-authentication/SKILL.md": "9e10a8449e2d1906f01189965cf390e51a5c6c7077d052f542b1b1cb548864ae",
          "skills/catalyst-authentication/references/auth-basics.md": "d6535760fe4cdddfc5abd17205a36e9d4dd9047d941f75ddc5932a7301573261",
          "skills/catalyst-authentication/references/connections.md": "2835d37f8943e2733bb268d264c5b87cce2279b24124c0b2cb29ce270f87b964"
        }
      },
      {
        "path": "skills/catalyst-basics/SKILL.md",
        "name": "c

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-18