Event Hooks

java-quality

3 events · 3 hooks

npx claudepluginhub ducpm2303/claude-java-plugins --plugin java-quality

Risk Indicators

Executes bash commandsModifies files

Source

Defined in hooks/hooks.json

Configuration

Stop

Hooks:

command

echo '[java-quality] Session ending. Reminder: run mvn test or ./gradlew test to verify all tests pass before considering this task complete.'

PreToolUse

Matcher: Bash

Hooks:

command

echo "$CLAUDE_TOOL_INPUT" | python3 -c "
import sys, json, re
try:
    data = json.load(sys.stdin)
    cmd = data.get('command', '')
    dangerous = [
        (r'git push.*--force.*(main|master)', 'Force push to main/master branch'),
        (r'git reset --hard', 'Hard reset (discards uncommitted changes)'),
        (r'mvn.*-Dmaven.test.skip=true', 'Skipping tests in Maven build'),
        (r'./gradlew.*-x test', 'Skipping tests in Gradle build'),
    ]
    for pattern, msg in dangerous:
        if re.search(pattern, cmd):
            print(f'[java-quality] WARNING: {msg}: {cmd}', flush=True)
except: pass
"

PostToolUse

Matcher: Write|Edit

Hooks:

command

echo '[java-quality] Java file modified. Consider running /java-security-check or asking the java-security-reviewer agent to check for OWASP vulnerabilities.'

Summary

Blocks git commits without staged Change Manifest or existing evidence artifacts; warns on git pushes for unreachable consumer registries or drifted CCKN; audits Stop for dishonest completion. Executes bash, blocks PreToolUse.