magento-plugins-interceptors

magento-plugins-interceptors is a skill for Claude Code from OrcaQubits/agentic-commerce-skills-plugins. It costs 41 tokens per session (762 once invoked), scanned A, original, MIT.

A guide to Magento 2 plugins, also called interceptors. A plugin changes the inputs, outputs, or execution of a public method without changing the original class.

In plain words
What is it for?
Use it to alter method arguments, adjust return values, or wrap existing Magento behavior in a custom module.
Why use it?
It helps you extend core or third-party code while keeping the original files untouched. It also distinguishes changes made before, after, or around a method call.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the magento2-commerce plugin — 19 skills, 1 agent shipped together

Good fit Use it to alter method arguments, adjust return values, or wrap existing Magento behavior in a custom module.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/orcaqubits/agentic-commerce-skills-plugins/magento-plugins-interceptors
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add OrcaQubits/agentic-commerce-skills-plugins --skill magento-plugins-interceptors
Clone the repo
git clone --depth 1 https://github.com/OrcaQubits/agentic-commerce-skills-plugins

Made for: Claude Code.

Or install magento2-commerce, the plugin that ships this one along with the rest of its 19 skills, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for magento-plugins-interceptors

README.md
[![agentmods](https://agentmods.dev/badge/skills/orcaqubits/agentic-commerce-skills-plugins/magento-plugins-interceptors/github.svg)](https://agentmods.dev/skills/orcaqubits/agentic-commerce-skills-plugins/magento-plugins-interceptors)
Your own site
<a href="https://agentmods.dev/skills/orcaqubits/agentic-commerce-skills-plugins/magento-plugins-interceptors"><img src="https://agentmods.dev/badge/skills/orcaqubits/agentic-commerce-skills-plugins/magento-plugins-interceptors/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for magento-plugins-interceptors

Your own site · 80×15
<a href="https://agentmods.dev/skills/orcaqubits/agentic-commerce-skills-plugins/magento-plugins-interceptors"><img src="https://agentmods.dev/badge/skills/orcaqubits/agentic-commerce-skills-plugins/magento-plugins-interceptors.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 41 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 762 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00041 $0.00762
Opus 5 $0.00020 $0.00381
Sonnet 5 $0.00008 $0.00152
Haiku 4.5 $0.00004 $0.00076

Measured 3d ago against content hash 8b12830a7928, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-17, from the pricing page.

Security

Grade A, and why

magento-plugins-interceptors scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

magento2-commerce/skills/magento-plugins-interceptors/SKILL.md · 89 lines

How it starts

The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Magento 2 Plugins (Interceptors)

Before writing code

Fetch live docs: Fetch https://developer.adobe.com/commerce/php/development/components/ for the official plugins guide with exact method signatures and limitations.

Conceptual Architecture

What Plugins Do

Plugins intercept public method calls on any non-final class, allowing you to modify arguments, return values, or wrap entire method execution — without modifying the original class or using inheritance.

Three Plugin Types

Type Method Prefix Purpose Receives
Before before<MethodName> Modify input arguments Subject + original args
After after<MethodName> Modify return value Subject + result (+ original args)
Around around<MethodName> Wrap entire execution Subject + $proceed callable + original args

Before Plugin

  • Method: beforeOriginalMethod($subject, $arg1, $arg2, ...)
  • Return: array of modified arguments, or null to keep originals
  • Executes before the original method

After Plugin

  • Method: afterOriginalMethod($subject, $result, ...$args)
  • Return: modified result
  • Executes after the original method
  • Since 2.2: receives original arguments after $result

Around Plugin

  • Method: aroundOriginalMethod($subject, callable $proceed, $arg1, $arg2, ...)
  • Return: whatever the method should return
  • Must call $proceed($arg1, $arg2) to invoke the original (or skip it)
  • Use sparingly — most cases are better served by before + after

Plugin Declaration (di.xml)

Plugins are declared as children of a <type> element:

  • name — unique plugin identifier
  • type — fully qualified plugin class name
  • sortOrder — execution priority (lower runs first)
  • disabledtrue to disable

Execution Order

  1. Before plugins execute in sortOrder (ascending)
  2. Around plugin's pre-$proceed code
  3. Original method (via $proceed)
  4. Around plugin's post-$proceed code
  5. After plugins execute in sortOrder (ascending)

Read the full file on GitHub · 89 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 89 lines · 41 tokens per session scan A 8b12830a7928

Subscribe to this mod's changes

magento-plugins-interceptors is a skill published in the GitHub repository OrcaQubits/agentic-commerce-skills-plugins (39 stars, last pushed 3d ago), licensed MIT. It adds 41 tokens to every session and 762 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-15.

Related

Other skills, from other repositories

archestra-dev-interactions-migrations

Use BEFORE writing or running any Drizzle migration that touches the interactions table (or any other very large, write-hot table). The interactions table is the platform's biggest, append-heavy table — every LLM proxy call writes a row — so a careless migration can take a write-blocking lock and stall the proxy.…

archestra-ai/archestra · 118 tokens

archestra-dev-llm-providers

Use when adding an LLM provider, changing proxy adapters or provider routes, fixing streaming/tool-call translation bugs, editing model fetchers or model handling, or touching provider credentials/enums and model constants.

archestra-ai/archestra · 49 tokens

archestra-dev-backend

Use when adding or changing Archestra backend routes, models, services, API request/response schemas, endpoint permissions, or OpenAPI/codegen for the generated API client.

archestra-ai/archestra · 40 tokens

debridge

Complete deBridge Protocol SDK for building cross-chain bridges, message passing, and token transfers on Solana. Use when building cross-chain applications, bridging assets between Solana and EVM chains, or implementing trustless external calls.

internet-court/internet-court-skill · 48 tokens

near-intents

Cross-chain token swap integration using NEAR Intents 1Click API. Use when building swap widgets, bridge interfaces, or multi-chain transfers across EVM, Solana, NEAR, TON, Stellar, and Tron.

internet-court/internet-court-skill · 49 tokens

arwp-agent-discovery

Add or repair machine-readable agent discovery and interoperability surfaces for a website. Use when asked to expose llms.txt, AGENTS.md, Agent Skills, ARD, MCP, A2A, WebMCP, OpenAPI, API catalogs, agent-readable sitemaps, or an ARWP site profile. Discover what the site truly supports, prefer upstream standards, and…

dkharlanau/agent-ready-web-profile · 88 tokens