Agent Claude Code
Audits cchb Rust source code for subprocess execution, path handling, JSONL parsing, sensitive-data leakage, and Rust safety/panic issues. Returns structured JSON findings. Read-only — no edits, no shell execution beyond grep/find/read. Used by the checking-cchb-security skill in parallel with…
Agent Claude Code
Audits cchb supply chain (Cargo.toml/Cargo.lock direct dependencies) and CI/CD workflows for known CVEs, outdated versions, EOL GitHub Actions, and release-pipeline hardening. Performs active vulnerability lookup against RUSTSEC and the GitHub Security Advisories API. Returns structured JSON findings. Read-only — no…
Hook Claude Code
Runs before the agent uses a tool for Write, Edit, MultiEdit and Bash tool calls, executing protect-config.sh and block-destructive.sh via bash (2 commands). From iselegant/cchb.
Hook Claude Code
Runs after a tool call finishes for Write, Edit and MultiEdit tool calls, executing format-and-lint.sh via bash. From iselegant/cchb.
Hook Claude Code
Runs when the agent finishes a response, executing stop-quality-gate.sh via bash. From iselegant/cchb.
Settings file Claude Code
Agent settings declaring 3 hook events (PreToolUse, PostToolUse, Stop).
Skill Claude CodeCodex
Performs cchb-specific security audit covering subprocess execution, path handling, JSONL parsing, sensitive-data leakage, Rust safety, supply chain (with active CVE lookup against RUSTSEC and crates.io), CI/CD workflows (with active GitHub Actions advisory lookup), and security policy. Read-only — produces a…
Instructions file
Instructions for iselegant/cchb, covering claude.md, common commands, development rules, context first and specification changes.