What the reviewer found
SessionStart (startup|resume) runs the headroom CLI's own subcommand 'headroom init hook ensure'; the CLI is a separately installed binary whose code is not in the packet, so what 'ensure' checks or changes is unreviewed. It is the vendor's own tool running inside the vendor's own plugin.
unreviewed-script— runs a script that could not be readunconditional— runs without any action from the user
What was read
The file as it ships in headroomlabs-ai/headroom:
plugins/headroom-agent-hooks/hooks/hooks.json
What the static scan said
The 26-rule scan found nothing in this file; the review read it anyway.
How this review was made
Fable 5.1 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.