mcp security hooks

stacklok/toolhive

Hook Claude Code

Runs after a tool call finishes for Edit and Write tool calls, running an inline shell check. From stacklok/toolhive.

Agent-Threat-Rule/agent-threat-rules

Hook

Runs before the agent uses a tool, executing atr_scan.py via python3. From Agent-Threat-Rule/agent-threat-rules.

r3dlight/phantom

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, running true. From r3dlight/phantom.