Security hooks

slbug/claude-ruby-grape-rails

Hook

Part of ruby-grape-rails

Runs after a tool call finishes for Edit, Write, Edit, Write, Edit, Write, Bash, Edit, Write and Bash tool calls, executing log-progress.sh, secret-scan.sh, security-reminder.sh, rubyish-post-edit.sh, plan-stop-reminder.sh, compress-verify-output.rb and skill-discovery-observer.rb (33 commands). From…

jfrog/claude-plugin

Hook

Part of jfrog

Runs before the agent uses a tool for Skill and Read tool calls, running an inline shell check. From jfrog/claude-plugin.

Zyoffsec/airtight-secure-coding

Hook

Part of airtight

Runs before the agent uses a tool for Write, Edit and MultiEdit tool calls, executing airtight-surface-guard.py via python3. From Zyoffsec/airtight-secure-coding.

sashamitrovich/milepost

Hook

Part of milepost

Runs before the agent uses a tool for Write, Edit and Bash tool calls, executing milepost-secret-guard.sh via bash. From sashamitrovich/milepost.

gosha70/code-copilot-team

Hook Claude Code

Runs before the agent uses a tool for Edit, Write and Bash tool calls, executing protect-files.sh and protect-git.sh (2 commands). From gosha70/code-copilot-team.

moberghr/mtk-agent-toolkit

Hook Claude Code

Part of mtk

Runs before the agent uses a tool for Bash, Edit, Write, Read, Grep, Glob, Bash, Edit and Write tool calls, executing security-gate.sh, interactive-guard.sh, scope-guard.sh, read-guard.sh and rule-trigger.sh (5 commands). From moberghr/mtk-agent-toolkit.

nerviq/nerviq

Hook Claude Code

Runs before the agent uses a tool for Read, Write, Edit and Bash tool calls, executing protect-secrets.sh via bash. From nerviq/nerviq.

thesaadmirza/blindfold

Hook

Part of blindfold

Runs after a tool call finishes for Bash tool calls, executing secret-redact.sh via bash. From thesaadmirza/blindfold.

hybridlabor-api/bdb-dev-optimized-agent-skills

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, executing go-gate.mjs via node. From hybridlabor-api/bdb-dev-optimized-agent-skills.

ProductOfAmerica/mcp-server-kicad

Hook

Part of kicad

Runs before the agent uses a tool for Read, Write and Edit tool calls, running an inline shell check. From ProductOfAmerica/mcp-server-kicad.

akashsebastian333/peephole

Hook

Part of peephole

Runs before the agent uses a tool for Write, Edit, MultiEdit, NotebookEdit, Bash, write, search_replace, run_terminal_command, mcp__.* and .+__.* tool calls, executing peephole.sh. From akashsebastian333/peephole.

23ag1/completely

Hook

Part of completely

Runs before the agent uses a tool for Bash, Write, Edit, MultiEdit and NotebookEdit tool calls, executing guard-dangerous.sh, guard-close.sh and guard-write-zone.sh via bash (3 commands). From 23ag1/completely.

randomittin/heimdall

Hook

Part of hmd

Runs before the agent uses a tool for Bash, Read, Grep, Glob, Agent, Write, Edit, Edit, MultiEdit and Write tool calls, executing heimdall-stub-patterns.sh with --show-toplevel, ---, --task, --spec and --arg (5 commands). From randomittin/heimdall.

turenlabs/batou

Hook Claude Code

Runs after a tool call finishes for Write, Edit and NotebookEdit tool calls, executing batou-hook.sh. From turenlabs/batou.

oikon48/claudecode-book

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, executing block-dangerous-command.sh. From oikon48/claudecode-book.

yurukusa/cc-safe-setup

Hook

Part of cc-safe-setup

Runs before the agent uses a tool for Bash, Bash, Bash, Write, Edit, Bash and Bash tool calls, executing move-delete-sequence-guard.sh and system-dir-protection-guard.sh with --force-with-lease (6 commands). From yurukusa/cc-safe-setup.

asq-sheriff/embediq

Hook Claude Code

Runs before the agent uses a tool, executing dlp-scanner.py and command-guard.py via python3 (4 commands). From asq-sheriff/embediq.

adriancarriger/lambda

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, executing dev-permission-hook.cjs via node. From adriancarriger/lambda.

astrogilda/mcp-keyring-injector

Hook

Part of mcp-keyring-injector

Runs when a session ends, executing remove-credentials.py. From astrogilda/mcp-keyring-injector.

rbah31/claude-code-workflow

Hook Claude Code

Runs after a tool call finishes for Write and Edit tool calls, running an inline shell check (2 commands). From rbah31/claude-code-workflow.

zebbern/termstack

Hook Claude Code

Runs before the agent uses a tool for Edit, Write and Bash tool calls, executing protect-files.mjs, warn-large-files.mjs and block-dangerous-commands.mjs via node (3 commands). From zebbern/termstack.

0x0w1/jig

Hook

Runs before the agent uses a tool for Bash tool calls, executing guard-push.sh. From 0x0w1/jig.

NFTYoginis/agency-of-one

Hook Claude Code

Runs before the agent uses a tool for Bash, Edit, Write and MultiEdit tool calls, executing safety-check.py, snapshot-before-edit.py and handoff-files-guard.py (3 commands). From NFTYoginis/agency-of-one.

MangroveTechnologies/mangrove-agent

Hook Claude Code

Runs when you submit a prompt, before the agent sees it, executing block-wallet-secrets.sh with --mode. From MangroveTechnologies/mangrove-agent.