Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/athola/claude-night-marketWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/athola/claude-night-market/from-hook)<a href="https://agentmods.dev/commands/athola/claude-night-market/from-hook"><img src="https://agentmods.dev/badge/commands/athola/claude-night-market/from-hook/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/athola/claude-night-market/from-hook"><img src="https://agentmods.dev/badge/commands/athola/claude-night-market/from-hook.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00011 | $0.00302 |
| Opus 5.5 | $0.00004 | $0.00121 |
| Sonnet 5.5 | $0.00002 | $0.00060 |
| Haiku 4.5 | $0.00001 | $0.00030 |
Grade C, and why
from-hook scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
if re.search(r"rm -rf /", context["command"]): What it actually says
/hookify:from-hook
Convert Python SDK hooks to declarative hookify rules.
Usage
/hookify:from-hook <hook_file.py> # Convert single hook
/hookify:from-hook --scan <hooks_dir> # Scan directory
/hookify:from-hook <hook.py> -o rules.md # Output to file
What It Does
- Parses Python hook AST
- Extracts regex patterns, string checks, startswith/endswith
- Generates equivalent hookify rule YAML
- Reports unconvertible hooks (network, file I/O, complex logic)
Example
Input hook:
import re
def hook(context):
if re.search(r"rm -rf /", context["command"]):
return {"action": "block", "message": "Dangerous!"}
Output rule:
---
name: block-rm-rf
event: bash
pattern: 'rm -rf /'
action: block
---
Dangerous command blocked.
Limitations
Cannot convert hooks with:
- Network calls (API requests)
- File I/O operations
- Complex conditional logic
- External dependencies
See Also
hookify:rule-catalog- Browse available ruleshookify:install- Install rules
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 58 lines · 11 tokens per session scan C 1dcc77362a99
from-hook is a command published in the GitHub repository athola/claude-night-market (343 stars, last pushed today), licensed MIT. It adds 11 tokens to every session and 302 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other commands, from other repositories
prompt
System instructions for writing effective prompts. Apply when generating commands, skills, agents, or any LLM instructions.
analyze-codebase
Generate comprehensive analysis and documentation of entire codebase.
audit
Perform security audit on codebase.
anti-slop-designer
Use when a UI looks machine-made rather than decided. Violet gradients, glassmorphism everywhere, identical cards in a grid, untouched shadcn or Material defaults, emoji bullets, or copy stuffed with seamless and unlock.
codex-review
Run OpenAI Codex code review on current changes or a specific branch/commit.
design-critic
Use when you want an honest read on a design instead of encouragement. What is wrong, ranked by severity, with the reason attached. Works on a screenshot, a mockup, or a described screen.