Next step

More hooks in security, in alphabetical order.

• Hook · security Dangerous Command Blocker Advanced protection against dangerous shell commands with multi-level security. Blocks catastrophic operations (rm -rf /, dd, mkfs), protects critical paths (.claude/, .git/, node_modules/), and warns about suspicious patterns. Features: catastrophic command blocking, critical path protection, smart pattern detection, and detailed safety messages.
  npx … --hook security/dangerous-command-blocker

  Add to stack
• Hook · security Env File Protection Prevent writing to .env files using the if condition for lightweight filtering. Blocks any Write tool call targeting .env* files, protecting secrets from accidental overwrites. Uses the if field to avoid spawning a process unless the file pattern matches.
  npx … --hook security/env-file-protection

  Add to stack
• Hook · security File Protection Protect critical files from accidental modification. Prevents editing of important system files, configuration files, and production code.
  npx … --hook security/file-protection

  Add to stack
• Hook · security Force Push Blocker Block git force push commands using the if condition for efficient filtering. Prevents accidental force pushes that can overwrite remote history. Covers --force, --force-with-lease, and the -f shorthand.
  npx … --hook security/force-push-blocker

  Add to stack
• Hook · security Secret Scanner Automatically detects hardcoded secrets before git commits. Scans for API keys from 30+ providers (Anthropic: sk-ant-..., OpenAI: sk-..., AWS: AKIA..., Stripe: sk_live_..., Google: AIza..., GitHub: ghp_..., Vercel, Supabase, Hugging Face: hf_..., Replicate: r8_..., Groq: gsk_..., Databricks: dapi..., GitLab, DigitalOcean, npm, PyPI, and more), tokens, passwords, private keys, and database credentials. Blocks commits containing secrets and suggests using environment variables instead.
  npx … --hook security/secret-scanner

  Add to stack
• Hook · security Security Scanner Scan code for security vulnerabilities and secrets after modifications. Uses multiple security tools to detect potential issues.
  npx … --hook security/security-scanner

  Add to stack