Stats
Actions
Tags
Help us improve
Share bugs, ideas, or general feedback.
{"riskFlags": {"touchesBash": true, "matchAllTools": false, "touchesFileWrites": true}, "typeStats": {"prompt": 4, "command": 15}, "eventStats": {"PreCompact": 1, "PreToolUse": 5, "PostCompact": 1, "PostToolUse": 2, "Notification": 1, "SessionStart": 4, "SubagentStop": 1, "SubagentStart": 1, "UserPromptSubmit": 2, "PostToolUseFailure": 1}, "originCounts": {"absolutePaths": 0, "pluginScripts": 0, "projectScripts": 0}, "timeoutStats": {"commandsWithoutTimeout": 15}}
10 events · 19 hooks
npx claudepluginhub cure-consulting-group/productengineeringskillsSafety signals detected in this hook configuration
Where this hook configuration is defined
Defined in hooks/hooks.json
Event handlers and matchers — expand Raw Configuration for the full JSON
auto|manualecho 'CONTEXT RE-INJECTION AFTER COMPACTION:\n\nCure Consulting Group Standards (always apply):\n- Clean Architecture: domain (pure logic) / data (DTOs + repos) / presentation (VMs + UI)\n- Android: Kotlin + Compose + Hilt + MVI + Coroutines/Flow\n- iOS: Swift + SwiftUI + MVVM + structured concurrency\n- Web: Next.js App Router + TypeScript strict + Tailwind + Server Components by default\n- Firebase: Firestore + Cloud Functions v2 (TypeScript) + security rules deny-by-default\n- Python: 3.11+, type hints, pydantic, pytest, asyncio\n- Go: 1.22+, interface-based, errgroup, table-driven tests\n- Rust: 2021 edition, thiserror/anyhow, clippy pedantic, tokio\n- SQL: parameterized queries, timestamptz, reversible migrations\n- Docker: multi-stage, non-root, health checks, pinned images\n- Terraform: remote state + locking, plan before apply, prevent_destroy on critical resources\n- Testing: 80% coverage minimum on new code\n- Security: validate all inputs, no hardcoded secrets, parameterized queries\n\nAvailable skills (80 total) — see docs/OVERVIEW.md for full domain-organized list. Highlights:\n\nEngineering (39): sdlc, ai-feature-builder, llmops, mcp-server-builder, rag-architect, agent-designer, agent-workflow-designer, api-architect, api-gateway, database-architect, firebase-architect, android-feature-scaffold, ios-architect, nextjs-feature-scaffold, stripe-integration, monorepo-navigator, git-worktree-manager, env-secrets-manager, performance-review, code-audit, e2e-testing, testing-strategy, design-system, micro-frontends, edge-computing, offline-first, i18n, notification-architect, ci-cd-pipeline, data-migration, feature-flags, growth-engineering, analytics-implementation, stitch-design, android-design-expert, ios-design-expert, web-design-expert, test-accounts, ai-security\n\nPlatform (10): project-bootstrap, infrastructure-scaffold, observability, incident-response, disaster-recovery, release-management, claude-bootstrap, interview-system-designer, self-improving-memory, git-workflow\n\nProduct (10): product-manager, product-design, market-research, customer-onboarding, feature-audit, technology-radar, portfolio-registry, uat, product-strategy, product-ops\n\nBusiness (11): engineering-cost-model, saas-financial-model, burn-rate-tracker, finops, investor-reporting, fundraising-materials, proposal-generator, comps-analysis, dcf-modeling, merger-modeling, equity-research\n\nMarketing (5): go-to-market, product-marketing, seo-content-engine, content-related GTM, technical-blog-writer\n\nSecurity (4): security-review, accessibility-audit, compliance-architect, qsbs-compliance\n\nLegal (1): legal-doc-scaffold\n\nAgents (39):\n Engineering: code-reviewer, test-runner, pr-reviewer, refactor-assistant, ci-debugger, release-coordinator, doc-generator, codebase-explainer, migration-validator, deployment-validator, dependency-auditor, api-validator, project-bootstrapper, qa-engineer, system-architect\n Product: product-analyst, ux-researcher, roadmap-strategist, competitive-intel\n Marketing: content-strategist, campaign-analyst, brand-guardian, growth-analyst, technical-content-strategist\n Business: financial-analyst, market-intelligence, investor-relations, contract-reviewer, ops-finance, investment-banker, equity-analyst, private-equity-analyst\n Data: data-analyst, metrics-dashboard, ab-test-analyst\n Security & Legal: accessibility-checker, firebase-security-auditor, legal-compliance, skill-security-auditor\n\nPersonas (4): cure-tech-lead, cure-product-lead, cure-engagement-pm, cure-solo-consultant\n\nRun /cure-product-engineering:<skill> to invoke any skill. Adopt a persona by referencing personas/<name>.md.'Edit|WriteFILE=$(echo $CLAUDE_TOOL_INPUT | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('file_path',''))" 2>/dev/null); if [ -n "$FILE" ]; then case "$FILE" in *.env|*.env.*) echo 'BLOCKED: Do not modify .env files directly. Use environment variable management.' >&2; exit 2 ;; *-lock.json|*-lock.yaml|*.lock|*shrinkwrap*) echo 'BLOCKED: Lock files should only be modified by package managers, not manually.' >&2; exit 2 ;; */credentials*|*/secrets*|*serviceAccount*|*service-account*|*.pem|*id_rsa*|*id_ed25519*) echo 'BLOCKED: Credential and secret files must not be modified by AI. Manage these manually.' >&2; exit 2 ;; *.tfstate|*.tfstate.*) echo 'BLOCKED: Terraform state files must never be manually edited. Use terraform state commands.' >&2; exit 2 ;; esac; fi; exit 0BashCMD=$(echo $CLAUDE_TOOL_INPUT | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('command',''))" 2>/dev/null); if [ -n "$CMD" ]; then case "$CMD" in *'rm -rf /'*|*'rm -rf '*|*'mkfs'*|*'dd if='*) echo 'BLOCKED: Dangerous system command detected.' >&2; exit 2 ;; esac; fi; exit 0Edit|WriteBashEdit|Writeauto|manualecho 'Context compacted. Cure Consulting Group plugin active — 80 skills, 39 agents, 4 personas available. Use /cure-product-engineering:<skill-name> to invoke. Run cat docs/OVERVIEW.md in plugin dir for full inventory.'Edit|WriteFILE=$(echo $CLAUDE_TOOL_INPUT | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('file_path',''))" 2>/dev/null); if [ -f "$FILE" ]; then echo "Updated $FILE"; fiBashCMD=$(echo $CLAUDE_TOOL_INPUT | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('command',''))" 2>/dev/null); echo "Executed: $CMD"echo '{"notification_logged": true}'startupecho 'Cure Consulting Group ProductEngineeringSkills plugin loaded (v6.2.1). 80 skills (domain-organized), 39 agents, 4 personas, 11 rules, 9 output styles, 4 MCP servers, 2 LSP servers. Use /cure-product-engineering:<skill-name> to invoke. Run /cure-product-engineering:project-bootstrap to set up a new project.'startupecho "Git branch: $(git branch --show-current 2>/dev/null || echo 'not a git repo'). Uncommitted changes: $(git status --porcelain 2>/dev/null | wc -l | tr -d ' '). Last commit: $(git log --oneline -1 2>/dev/null || echo 'none')."startupif [ -f package.json ]; then OUTDATED=$(npm outdated --json 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); print(len(d))" 2>/dev/null || echo '0'); if [ "$OUTDATED" -gt 0 ] 2>/dev/null; then echo "Dependency check: $OUTDATED outdated packages. Consider running dependency-auditor agent."; fi; fistartupecho '\nAvailable Agents (39):\n Engineering: code-reviewer, test-runner, pr-reviewer, refactor-assistant, ci-debugger, release-coordinator, doc-generator, codebase-explainer, migration-validator, deployment-validator, dependency-auditor, api-validator, project-bootstrapper, qa-engineer, system-architect\n Product: product-analyst, ux-researcher, roadmap-strategist, competitive-intel\n Marketing: content-strategist, campaign-analyst, brand-guardian, growth-analyst, technical-content-strategist\n Business: financial-analyst, market-intelligence, investor-relations, contract-reviewer, ops-finance, investment-banker, equity-analyst, private-equity-analyst\n Data: data-analyst, metrics-dashboard, ab-test-analyst\n Security & Legal: accessibility-checker, firebase-security-auditor, legal-compliance, skill-security-auditor\n\nAvailable Personas (4): cure-tech-lead, cure-product-lead, cure-engagement-pm, cure-solo-consultant'echo "Expert task complete. Final quality check checklist:\n- Tests added? \u2192 test-runner agent\n- Lint/Types pass? \u2192 ci-debugger agent\n- PR ready? \u2192 pr-reviewer agent\n- API gaps \u2192 api-validator agent\n- No docs for new feature \u2192 doc-generator agent\n\nIf everything looks good, respond: 'Session complete. All quality checks passed.'"AGENT=$(echo $CLAUDE_TOOL_INPUT | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('name', d.get('agent_name', 'subagent')))" 2>/dev/null); echo "Hiring specialized expert: @$AGENT"PROMPT=$(echo $CLAUDE_TOOL_INPUT | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('prompt','').lower()[:500])" 2>/dev/null); case "$PROMPT" in *'delete all'*|*'drop all'*|*'remove everything'*|*'wipe'*|*'nuke'*) echo '{"warning": "Destructive operation detected in prompt. Proceeding with caution — will confirm before any irreversible actions."}' ;; esac; exit 0BashCMD=$(echo $CLAUDE_TOOL_INPUT | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('command',''))" 2>/dev/null); echo "Command failed: $CMD. Analyzing output..."Share bugs, ideas, or general feedback.