safe-gcloud

Defined in hooks/hooks.json

{
  "PreToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "bash ${CLAUDE_PLUGIN_ROOT}/scripts/check-gcloud.sh",
          "timeout": 5
        }
      ],
      "matcher": "Bash"
    }
  ]
}

"Executes a bash script before Read, Grep, or Bash tools via PreToolUse hook with matcher. Can block or modify tool calls. Runs bash, no file writes."