Claude Code mods can change the tool path. Review them like executable code.

Claude Code 2.1.287 ships Mods: plugin modules can observe events, alter behavior and draw interface elements. A hook can rewrite or answer a tool call before the normal handler runs. Review that execution path when installing a mod. ^{1 2}

Use a small observer first: show context consumption, record edits or expose a review view. Before a mod rewrites commands or decides permissions, test an allowed action, a denied action and a hook failure on the exact version you deploy.

The tutorial says the API can change between releases and identifies the locally generated type declarations as authoritative for the installed build. Keep the plugin and harness versions together. A mod generated in your session still needs a review before it gets the authority to change later sessions. ²