Security hooks

reganomalley/claudia

Hook

Part of claudia

Runs before the agent uses a tool for Edit, Write, MultiEdit, Edit, Write, MultiEdit, Edit, Write, MultiEdit, Edit, Write, MultiEdit, Edit, Write, MultiEdit, Edit, Write, MultiEdit, Edit, Write, MultiEdit, Edit, Write and MultiEdit tool calls, executing check-secrets.py, check-practices.py, check-deps.py…

bop-clocktower/canary

Hook Claude Code

Part of canary

Runs before the agent uses a tool for Bash, Write, Edit and mcp__.* tool calls, executing block-no-verify.js, protect-config.js, sentinel-pre.js and prefer-first-party-mcp.js via node with --show-toplevel (4 commands). From bop-clocktower/canary.

soenkenils/mailbox-mcp-server

Hook Claude Code

One of 3 in settings.json

Runs before the agent uses a tool for Write and Edit tool calls, executing protect-sensitive-files.py. From soenkenils/mailbox-mcp-server.

DanceNitra/agora

Hook Claude Code

One of 5 in settings.json

Runs before the agent uses a tool for Bash, Write, Edit, MultiEdit and NotebookEdit tool calls, running python -m inspeximus.claude_code. From DanceNitra/agora.

nometria/claude-code-plugin

Hook

One of 3 in hooks.json

Runs before the agent uses a tool for Skill and Bash tool calls, executing security-gate.sh. From nometria/claude-code-plugin.

ivuorinen/skills

Hook Claude Code

Part of ivuorinen-skills

Runs before the agent uses a tool for Bash, Bash, Read, Glob, Bash, Bash and Bash tool calls, executing deny-agents-path-hook.py, deny-unsafe-git-hook.py, guard-ctx-ok-hook.py and ask-destructive-restore-hook.py with --quiet and --no-verify (6 commands). From ivuorinen/skills.

dinhanhthi/coding-friend

Hook

One of 8 in hooks.json

Runs before the agent uses a tool for Read, Write, Edit, Glob, Grep and apply_patch tool calls, executing privacy-block.sh and scout-block.cjs (2 commands). From dinhanhthi/coding-friend.

iwritec0de/app-dev

Hook

Part of app-dev

Runs before the agent uses a tool for Write, Edit and Bash tool calls, executing security-check.sh, pre-edit.sh and pre-push.sh via bash (3 commands). From iwritec0de/app-dev.

ArtemioPadilla/agent-triforce

Hook

Part of agent-triforce

Runs before the agent uses a tool for Write and Edit tool calls, executing security-scanner.py via python3 with --stdin and --audit-trail. From ArtemioPadilla/agent-triforce.

matanryngler/deployshield

Hook

Part of deployshield

Runs on the BeforeTool event for run_shell_command tool calls, executing validate-cloud-command.py via python3. From matanryngler/deployshield.

architonixlabs/RepoOrch

Hook

Part of repo-orchestrator

Runs before the agent uses a tool for Bash tool calls, running an inline shell check. From architonixlabs/RepoOrch.

lendtrain/mortgage

Hook

Part of mortgage

Runs when you submit a prompt, before the agent sees it, executing guard-sensitive-data.sh. From lendtrain/mortgage.

KingGyuSuh/gemini-search-cc

Hook

Part of gemini

Runs before the agent uses a tool for Bash tool calls, executing guard-filter.mjs via node. From KingGyuSuh/gemini-search-cc.

danjdewhurst/hcloud-skills

Hook

Part of hcloud

Runs before the agent uses a tool for Bash tool calls, executing hcloud-safety.sh via bash. From danjdewhurst/hcloud-skills.

chris-peterson/ClaudeWatch

Hook

Part of ClaudeWatch

Runs before the agent uses a tool for Bash, Monitor, Write and Edit tool calls, executing watchdog.py via python3 (2 commands). From chris-peterson/ClaudeWatch.

choiyounggi/groundwork

Hook

Part of guardrails

Runs after a tool call finishes for Bash and mcp__.* tool calls, executing audit-log.sh via bash. From choiyounggi/groundwork.

brunob54/superpowers-orchestrator

Hook

Part of superpowers-orchestrator

Runs before the agent uses a tool for Bash, Read, Edit, Write, Bash and Bash tool calls, executing block-dangerous-commands.js, protect-secrets.js and bash-compress-hook.js via node (3 commands). From brunob54/superpowers-orchestrator.

SyloRei/claude-godmode

Hook

Part of claude-godmode

Runs before the agent uses a tool for Bash tool calls, executing pre-tool-use.sh and pre-tool-use-secrets.sh via bash (2 commands). From SyloRei/claude-godmode.

mauhpr/agentlint-plugin

Hook

Part of agentlint

Runs before the agent uses a tool for Bash, Edit and Write tool calls, executing resolve-and-run.sh with --event and --project-dir. From mauhpr/agentlint-plugin.

tractorjuice/arckit-gemini

Hook

One of 4 in hooks.json

Runs on the BeforeTool event for write_file, write_file and edit_file tool calls, executing validate-filename.py and file-protection.py via python3 (2 commands). From tractorjuice/arckit-gemini.

kenryu42/gemini-safety-net

Hook

Runs on the BeforeTool event, running npx -y cc-safety-net hook --gemini-cli. From kenryu42/gemini-safety-net.

hmcts/agentic-plugins-marketplace

Hook

Part of hmcts-apim-sdlc-orchestrator

Runs when you submit a prompt, before the agent sees it, executing block-pii.sh and block-secrets.sh (2 commands). From hmcts/agentic-plugins-marketplace.

hmcts/agentic-plugins-marketplace

Hook

Part of hmcts-apim-sdlc-orchestrator

Runs before the agent uses a tool for Bash, Read, Write, Edit, Write and Edit tool calls, executing guard-bash.sh, guard-paths.sh, block-pii.sh and block-secrets.sh (4 commands). From hmcts/agentic-plugins-marketplace.

lsiyu241-creator/awesome-claude-cookbook

Hook Claude Code

One of 3 in settings.json

Runs before the agent uses a tool, executing pre-write.sh and pre-bash.sh (2 commands). From lsiyu241-creator/awesome-claude-cookbook.