AI Weekly Malaysia

Anthropic introduced mods for Claude Code: small TypeScript functions that hook into events Claude Code emits (tool calls, permission prompts, UI draws) to run before, after, instead of, or wrapping them. A mod can rewrite prompts before they reach the model, block/retry tool calls, approve or deny permissions, redact secrets from tool output, and add or replace UI elements in the CLI, desktop app, or both. Mods ship inside plugins and are explicitly not sandboxed — they run with the same machine access as Claude Code itself, so the post says to install only from trusted sources.

Why: If your team runs Claude Code, this is a new install surface: mods arrive as plugins and execute unsandboxed with the same access as Claude Code, so the practical decision is whether to allow third-party mods at all and who reviews them. The useful capability to note is prompt/tool-call interception — you can now redact secrets from tool output before Claude reads it, or block and retry specific tool calls, without waiting on Anthropic to ship a feature. Hooks previously could not rewrite events, draw UI, or replace features; mods can, which changes what you'd build in-house versus install.