agentmods.dev

Notification

Runs when the agent sends a notification, running /usr/bin/pw-cat --playback .claude/complete.flac. From marek-burza/shrubbery.

Hook for Claude Code

16 yesterday B scan tokens not measured GPL-3.0
View the source file marek-burza/shrubbery
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add hooks/marek-burza/shrubbery/notification
Clone the repo
git clone --depth 1 https://github.com/marek-burza/shrubbery

Made for: Claude Code.

Per session not measured What this adds to a session before it is invoked.
When invoked not measured Not applicable: nothing here is loaded into a session.
Security scan B 1 finding. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Security

Grade B, and why

Notification scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the commands this hook runs, not an audit. A hook is shell that executes on your machine at the event it names, which is why every command in it is printed with what was found.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

"command": "/usr/bin/pw-cat --playback .claude/complete.flac"
.claude/settings.json · 13 lines

The source is not reproduced here

Licensed GPL-3.0

The repository is licensed GPL-3.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.

Read it on GitHub

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 13 lines scan B aa5ed4888a09

Subscribe to this mod's changes

Notification is a hook published in the GitHub repository marek-burza/shrubbery (16 stars, last pushed yesterday), licensed GPL-3.0. Its token cost is not measured: a hook is shell that never enters the context. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.

data-sciencemachine-learningnumerai
Related

Other hooks, from other repositories

SubagentStart

Runs when a subagent starts, executing log_agent_metrics.py via uv. From streamlit/streamlit.

streamlit/streamlit · not measured

PreToolUse

Runs before the agent uses a tool for Bash tool calls, executing format.sh. From zenml-io/zenml.

zenml-io/zenml · not measured

PostToolUse

Runs after a tool call finishes for Edit and Write tool calls, executing post_edit_autofix.sh. From streamlit/streamlit.

streamlit/streamlit · not measured

PostToolUse

Runs after a tool call finishes for Read, Edit, Write, MultiEdit and NotebookEdit tool calls, executing ds-python.sh via bash (2 commands). From StamKavid/last-ds-mile.

StamKavid/last-ds-mile · not measured

SessionStart

Runs when a session starts on startup, resume and clear, executing ds-python.sh via bash. From StamKavid/last-ds-mile.

StamKavid/last-ds-mile · not measured

PostToolUse

Runs after a tool call finishes for Write and Edit tool calls, executing format_and_lint.sh. From supabase/supabase.

supabase/supabase · not measured