Webfetch Cache

Mods productivity 27 Scanned by NVIDIA SkillSpector

Install Command

npx claude-code-templates@latest --mod productivity/webfetch-cache

View on GitHub

claude-code — webfetch-cache

Scanned by NVIDIA SkillSpector

Automated static analysis (no LLM) · v2.12.0 · 2026-10-17

Partial analysis: some checks could not run on this component.

3 observations

scanner score 36/100

SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.

Agent Config Directory Access
Agent Snooping · README.md:23
MCP server referenced without pinned version: 'npx claude-code-templates'.
MCP Rug Pull · README.md:32
Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: network.
MCP Least Privilege · SKILL.md:1

Learn more about NVIDIA SkillSpector.

Content

Claude Mod. A mod is a complete Claude Code plugin built on function hooks (Anthropic's mods/ layout); it is on by default in Claude Code 2.1.287+. Hooks module: hooks/webfetch-cache.ts. Options: ttlSeconds, maxEntries (set in user or managed settings pluginConfigs, or /config). Run claude plugin validate on the installed folder to see every event it hooks and every $ call it makes.

webfetch-cache

Short-circuits repeated WebFetch calls for the same URL + prompt within a session. On a cache hit the hook answers { result } itself without calling next (no network call); on a miss it awaits the real fetch, stores the tool's record and returns what came back.

Only the tool's own record (result) is cached, never core's ref: that number names the messages core produced for one specific call and must not be replayed on another.

A long page read in pieces (WebFetch's offset, Claude Code 2.1.290+) is cached piece by piece: a read further down the page never gets the first page back.

Options

  ttlSeconds: number  how long an entry stays fresh (default 900)
  maxEntries: number  cache size (default 200)

Declared in .claude-plugin/plugin.json (userConfig). Set them in /config, in user settings (~/.claude/settings.json, not project settings), with --settings <file> or in managed settings:

json

{ "pluginConfigs": { "webfetch-cache@skills-dir": { "options": { } } } }

Install

npx claude-code-templates@latest --mod productivity/webfetch-cache
claude

It is written to .claude/skills/webfetch-cache/, which Claude Code auto-loads as webfetch-cache@skills-dir. For one session with hot reload: claude --plugin-dir .claude/skills/webfetch-cache. claude plugin validate .claude/skills/webfetch-cache prints every event it hooks and every $ call it makes.

Requirements. Mods are on by default in Claude Code 2.1.287+. Typed against Anthropic's declarations: https://github.com/anthropics/claude-code/tree/main/mods