Plugin

signet

Ed25519-signs every tool call and appends to a hash-chained, tamper-evident audit log. Zero config — signing starts immediately after install. No native dependencies (embedded WASM). Audit logs at ~/.signet/audit/ with optional CLI verification via signet audit --verify.

• Published source
• Repository

Analysed

11 October 2026

Last observed

11 October 2026

What the code does

• Runs hooks automatically Hooks that execute without being called explicitly.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.