Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add neurawork-git/n8n-autopilot/plugin install n8n-autopilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/hooks/neurawork-git/n8n-autopilot/pre-tool-use)<a href="https://agentmods.dev/hooks/neurawork-git/n8n-autopilot/pre-tool-use"><img src="https://agentmods.dev/badge/hooks/neurawork-git/n8n-autopilot/pre-tool-use/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/hooks/neurawork-git/n8n-autopilot/pre-tool-use"><img src="https://agentmods.dev/badge/hooks/neurawork-git/n8n-autopilot/pre-tool-use.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
PreToolUse scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the commands this hook runs, not an audit. A hook is shell that executes on your machine at the event it names, which is why every command in it is printed with what was found.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
"command": "INPUT=\"$CLAUDE_TOOL_INPUT\"; if echo \"$INPUT\" | grep -qE '(curl|wget|urllib|Invoke-RestMethod|requests\\.).*(/api/v1|n8n\\.cloud|n8n\\.io)' 2>/dev/null; then if echo \"$INPUT\" | grep -qE '/api/v1/data-tab What it actually says
{
"PreToolUse": [
{
"matcher": "Bash",
"hooks": [
{
"type": "command",
"command": "INPUT=\"$CLAUDE_TOOL_INPUT\"; if echo \"$INPUT\" | grep -qE '(curl|wget|urllib|Invoke-RestMethod|requests\\.).*(/api/v1|n8n\\.cloud|n8n\\.io)' 2>/dev/null; then if echo \"$INPUT\" | grep -qE '/api/v1/data-tables' 2>/dev/null; then : ; else echo 'BLOCKED: Use n8nac CLI instead of direct API calls (curl/wget/urllib/Invoke-RestMethod). Carve-out: /api/v1/data-tables is allowed — loop the curl from the /n8n-autopilot:data-tables skill, do not switch HTTP tool to dodge this.' >&2; exit 2; fi; fi",
"timeout": 5
},
{
"type": "command",
"command": "INPUT=\"$CLAUDE_TOOL_INPUT\"; bash ${CLAUDE_PLUGIN_ROOT}/scripts/enforce-env.sh \"$INPUT\"",
"timeout": 5
},
{
"type": "command",
"command": "INPUT=\"$CLAUDE_TOOL_INPUT\"; bash ${CLAUDE_PLUGIN_ROOT}/scripts/push-gate.sh \"$INPUT\"",
"timeout": 15
},
{
"type": "command",
"command": "INPUT=\"$CLAUDE_TOOL_INPUT\"; if echo \"$INPUT\" | grep -qE 'n8nac push' 2>/dev/null; then bash ${CLAUDE_PLUGIN_ROOT}/scripts/ensure-mcp-trigger-setting.sh \"$INPUT\" 2>&1; fi",
"timeout": 5
}
]
}
]
}What else hooks.json configures
This page is one entry in a file that holds 4. Installing the file brings all of them; each is measured and scanned on its own page.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 29 lines scan A 4be6960154a3
PreToolUse is a hook published in the GitHub repository neurawork-git/n8n-autopilot (18 stars, last pushed 1mo ago), licensed MIT. Its token cost is not measured: a hook is shell that never enters the context. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other hooks, from other repositories
Stop
Runs when the agent finishes a response, running python3. From dbc-oduffy/coordinator-claude.
CwdChanged
Runs on the CwdChanged event, executing rot-router.ps1 and prover-remind.ps1 with --stdin (2 commands). From Nova-Violet-Role/RoT-MoE.
BeforeTool
Runs on the BeforeTool event for write_file, replace, run_shell_command and shell tool calls, executing before-tool.js via node. From richardcb/oh-my-gemini.
Stop
Runs when the agent finishes a response, running node. From tractorjuice/arckit-claude.
Notification
Runs when the agent sends a notification, executing notification.sh via bash. From prime-radiant-inc/claude-plugin-cxdb-integration.
Stop
Runs when the agent finishes a response, executing find-node.sh via bash (14 commands). From speson/not-my-reforge.