ccam-config

ccam-config is a plugin for Claude Code from hoangsonww/Claude-Code-Agent-Monitor. Its manifest loads nothing; the 5 skills, 3 commands, 1 agent it bundles cost 544 tokens per session together, scanned A, original, MIT.

A Claude Code plug-in for reviewing configuration and file-based memory through the Agent Monitor dashboard. It covers skills, subagents, commands, MCP servers, hooks, settings, and project memory.

In plain words
What is it for?
Use it to govern a Claude Code setup: review what is installed, inspect project and user settings, check hooks and MCP servers, and maintain the agent's stored memory.
Why use it?
It helps you see configuration sprawl, duplicated guidance, risky automation, and stale stored facts in one read-only audit.

Plugin for Claude Code

Written for Claude Code: a Claude Code plugin manifest. Also seen: mentions subagents; mentions Claude Code.

Good fit Use it to govern a Claude Code setup: review what is installed, inspect project and user settings, check hooks and MCP servers, and maintain the agent's stored memory.

Compare 6 plugins from other repositories ↓
Install in Claude Code
/plugin marketplace add hoangsonww/Claude-Code-Agent-Monitor
/plugin install ccam-config
About the project

Claude Code Agent Monitor is a dashboard that records and displays activity from Claude Code and Codex coding-agent sessions, including tool use and subagent coordination. It is for people who need live visibility into agent work through a web interface or native desktop app. The catalogue entries extend Claude Code with skills, commands, agents, plugins, instructions, hooks, and settings related to the monitor.

hoangsonww/Claude-Code-Agent-Monitor · 1,121 stars · on GitHub · hoangsonww.github.io

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/hoangsonww/Claude-Code-Agent-Monitor

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ccam-config

README.md
[![agentmods](https://agentmods.dev/badge/plugins/hoangsonww/claude-code-agent-monitor/ccam-config/github.svg)](https://agentmods.dev/plugins/hoangsonww/claude-code-agent-monitor/ccam-config)
Your own site
<a href="https://agentmods.dev/plugins/hoangsonww/claude-code-agent-monitor/ccam-config"><img src="https://agentmods.dev/badge/plugins/hoangsonww/claude-code-agent-monitor/ccam-config/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ccam-config

Your own site · 80×15
<a href="https://agentmods.dev/plugins/hoangsonww/claude-code-agent-monitor/ccam-config"><img src="https://agentmods.dev/badge/plugins/hoangsonww/claude-code-agent-monitor/ccam-config.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session not measured What this adds to a session before it is invoked.
When invoked not measured The manifest loads nothing itself; its 5 skills, 3 commands, 1 agent cost 544 tokens a session between them.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Security

Grade A, and why

ccam-config scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/ccam-config/.claude-plugin/plugin.json · 12 lines

What it actually says

{
  "name": "ccam-config",
  "description": "Audit and govern your Claude Code configuration and file-based memory via the Agent Monitor Config Explorer API — skills, subagents, commands, MCP servers, hooks, settings, and the per-project memory store. Surfaces sprawl, duplication, risky hooks, and stale facts, all read through the dashboard at http://localhost:4820.",
  "version": "2.4.5",
  "author": { "name": "Son Nguyen", "url": "https://github.com/hoangsonww" },
  "homepage": "https://github.com/hoangsonww/Claude-Code-Agent-Monitor",
  "repository": "https://github.com/hoangsonww/Claude-Code-Agent-Monitor",
  "license": "MIT",
  "keywords": ["config", "memory", "governance", "audit", "mcp", "hooks", "claude-code"],
  "skills": "./skills/"
}
Contents

What it installs

The manifest is a name and a version. 5 skills, 3 commands, 1 agent travel with it, and installing the plugin installs all of them — 544 tokens a session between them. Each is measured on its own page, and each can be installed alone.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago Changed b771f2d386da
  2. 4d ago Changed 12ffc15e9136
  3. 5d ago Changed e6e4a2a982ab
  4. 6d ago Changed ee1435e5a8a5
  5. 16d ago Changed 4460c74cf9ac
  6. 22d ago Changed 18a97d7df364
  7. 29d ago Changed b0dd9d5f7bb3
  8. 1mo ago Changed b04652340726
  9. 1mo ago Changed f8a20a29ca68
  10. 1mo ago First seen · 12 lines scan A 9e75168506ad

Subscribe to this mod's changes

ccam-config is a plugin published in the GitHub repository hoangsonww/Claude-Code-Agent-Monitor (1,121 stars, last pushed 4d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.