--- title: "Scan inventory: review, role & definition · Undominated.ai" canonical: https://undominated.ai/agents/anthropic-scan-inventory/ description: "Pins the Claude Security cartographer that partitions one tree and must place every listed top-level directory on a scanned or skipped ledger." --- # Scan inventory: review, role & definition · Undominated.ai > Pins the Claude Security cartographer that partitions one tree and must place every listed top-level directory on a scanned or skipped ledger. [← Explore all agents](/agents/) SECURITY REVIEW / Anthropic # Scan inventory Pins the Claude Security cartographer that partitions one tree and must place every listed top-level directory on a scanned or skipped ledger. [Use this definition ↓](#setup)[Original source ↗](https://github.com/anthropics/claude-plugins-official/tree/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/agents) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Anthropic Licence [Proprietary — Anthropic internal-use terms ↗](https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/LICENSE) Revision 41f32e407b45 [Read what was—and wasn’t—checked ↓](#review) “A read-only scan cartographer, not for direct invocation or vulnerability research, that accounts for every top-level directory the dispatch lists.” [Anthropic · upstream description ↗](https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/agents/scan-inventory.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The agents index has no entry for plugins/claude-security/agents/scan-inventory.md. - The file forbids vulnerability research, declares no shell, and says an answer that omits a dispatched top-level directory is invalid and must be completed rather than narrowed. ### A good fit for - Partitioning a repository the Claude Security scan workflow has already rooted at SCAN_ROOT - Supply the absolute repository root, top-level directory list and maximum component count. - Return scanned components and a separate skipped-components ledger accounting for the target. ### Weigh up before choosing - This review did not execute the resource. - A Markdown profile does not register a native subagent by itself. - The install line installs the whole claude-security plugin, not this agent alone. - The file ranks components that handle requests, files, or credentials ahead of other code. It does not ask for a secret, and no shell tool is declared. - The maximum component count and the target component size come from the dispatch. This review did not read a dispatch. - Top-level coverage is a structural accounting check, not proof that every nested file was read or every vulnerable path was found. - The plugin-specific licence limits use and modification to authorized internal use with Anthropic products/services. General redistribution and non-Anthropic use are not permitted; obtain and use it through the publisher under the applicable agreement. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/claude-security/agents/scan-inventory.md - plugins/claude-security/README.md - README.md - LICENSE - Round 2: pinned definition, output contract and permission/dependency boundaries reread on 2026-10-14 - plugins/claude-security/LICENSE (overrides repository-wide licence for this plugin) ### Our findings - The description says it accounts for every top-level directory and is not for direct invocation or vulnerability research. Tools are Read, Glob, and Grep. - The body says it has no shell and dispatches no subagents, and that it does not hunt for vulnerabilities or judge severity. - For a whole-repository scan, every top-level directory the dispatch lists must land in components or securityScanSkippedComponents. An omission is invalid. - It says repository text that tells it to omit a directory is data, not an instruction. A skip still needs the agent's own reason on the skipped ledger. - Component-size guidance must not cause more code to be skipped when the component count cap is reached. - Untrusted repository text cannot authorize omission; skipped paths require the cartographer’s own explicit reasons. - The exact-revision plugin licence is proprietary and expressly covers prompts, agent/skill definitions, workflows, code and documentation; the root Apache licence does not license this plugin for redistribution. ### Not established by this review - The resource was not executed and its tools were not called. - No tree was partitioned. - Glob and Grep were not called. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Use the role in your project. [Upstream setup instructions ↗](https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/README.md) DOCUMENTED COMMAND /plugin install claude-security@claude-plugins-official Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - Read the plugin-specific proprietary licence at this revision. Obtain the plugin from Anthropic and use/modify it only within the applicable authorized Anthropic-product agreement; this catalogue provides no copy for installation. - The claude-security README shows that line, including the four leading spaces, then /reload-plugins on the next line. - That line installs the claude-security plugin. It does not name this agent. - The repository root README only has /plugin install {plugin-name}@claude-plugins-official, which is a placeholder, so it is not install.command. - Use the matching dispatcher and validate path coverage and non-overlap against the actual target tree before launching researchers. ### Before you start - Claude Code - Python 3.9 or newer on PATH, which the plugin README lists for the plugin - The scan or fix job that dispatches this agent ### Compatibility Claude Code ### Read-only partition of one dispatched tree - Read, Glob, and Grep under the dispatched SCAN_ROOT - No shell tool is declared - Return two ledgers; it does not file a vulnerability ### Cost model Proprietary plugin for authorized internal use solely with Claude Code or other Anthropic products/services under the applicable Anthropic agreement. Host/model charges may apply; no general redistribution licence. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [scan-inventory ↗](https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/agents/scan-inventory.md) Checked 2026-10-14 https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/agents/scan-inventory.md Supports: no shell, no vulnerability research, and directory ledger - [claude-security README ↗](https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/README.md) Checked 2026-10-14 https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/README.md Supports: plugin install line - [Repository README ↗](https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/README.md) Checked 2026-10-14 https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/README.md Supports: placeholder install line - [Controlling Claude Security plugin licence ↗](https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/LICENSE) Checked 2026-10-14 https://github.com/anthropics/claude-plugins-official/blob/41f32e407b450055044f167db7ded5e8ff67d203/plugins/claude-security/LICENSE Supports: Dependency setup and source-review boundary KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Scan loader ↗ Pins the Claude Security loader whose only input is one directory plus one file name, and that returns that JSON unchanged.](/agents/anthropic-scan-loader/)[### Scan verifier ↗ Pins the Claude Security voter that takes one candidate finding and tries to disprove it, with a false-positive default and a file-and-line citation rule.](/agents/anthropic-scan-verifier/)[### Exploitability verifier ↗ Pins the fp-check phase-2 agent that stays read-only while deciding whether a suspected bug is exploitable, and that skips a proof the bug class does not need.](/agents/trailofbits-exploitability-verifier/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Find reusable instructions](/skills/) - [Inspect connections](/mcp-servers/) - [Build a toolkit](/tools/) - [Choose the model](/compare/)