Event Hooks

runwall

2 events · 139 hooks

npx claudepluginhub efij/secure-claude-code

Risk Indicators

Executes bash commandsModifies files

Source

Defined inline in plugin.json manifest

Configuration

PreToolUse

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/block-unsafe-git.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/pre-push-scan.sh" "$TOOL_INPUT"

Matcher: Read

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PreToolUse Read" "$TOOL_INPUT"

Matcher: Write

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PreToolUse Write" "$TOOL_INPUT"

Matcher: Edit

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PreToolUse Write" "$TOOL_INPUT"

Matcher: MultiEdit

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PreToolUse Write" "$TOOL_INPUT"

Matcher: Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PreToolUse Bash" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PreToolUse mcp__generic" "$TOOL_INPUT"

Matcher: Read|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/protect-secrets-read.sh" "$TOOL_INPUT"

Matcher: Read|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/agent-session-secret-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/abuse-chain-defense.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/instruction-source-dropper-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-permission-guard.sh" "$TOOL_INPUT"

Matcher: GatewayRegistry

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-upstream-swap-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-tool-impersonation-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-tool-schema-widening-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-parameter-smuggling-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-bulk-read-exfil-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-egress-private-network-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-egress-destination-class-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-egress-policy-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-server-command-chain-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-secret-env-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-install-source-allowlist.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/skill-install-source-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/skill-multi-stage-dropper-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/sideloaded-extension-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/tool-origin-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/tool-capability-escalation-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/skill-exec-chain-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/skill-trust-boundary-tamper-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/instruction-override-bridge-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/plugin-manifest-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/plugin-update-source-swap-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/plugin-hook-origin-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/plugin-exec-chain-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/plugin-surface-expansion-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/plugin-trust-boundary-tamper-guard.sh" "$TOOL_INPUT"

Matcher: Read|Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/workspace-boundary-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/trusted-config-symlink-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/sandbox-escape-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/sandbox-policy-tamper-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/audit-evasion-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/cloud-metadata-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/dns-exfiltration-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/local-webhook-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/network-exfiltration.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/archive-and-upload-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/local-tunnel-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/tunnel-beacon-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/remote-script-dropper-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/credential-export-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/clipboard-exfiltration-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/browser-cookie-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/browser-profile-export-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/browser-remote-debug-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/oauth-device-flow-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/cloud-credential-assume-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/secret-manager-abuse-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/container-socket-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/container-escape-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/docker-build-secret-leak-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/secret-diff-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/env-sample-secret-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/config-secret-inline-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/config-secret-inline-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/package-manager-auth-inline-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/credential-helper-downgrade-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/log-poisoning-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/log-poisoning-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/config-tamper-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/git-hook-persistence-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/git-attributes-filter-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/git-remote-rewire-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/git-submodule-source-swap-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ci-secret-release-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ci-self-hosted-runner-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ci-artifact-secret-upload-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/dependency-script-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/package-lock-source-swap-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/terraform-provider-source-swap-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/dangerous-migration-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/terraform-destroy-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/local-ca-trust-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/prod-target-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/kubectl-port-forward-prod-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/kube-exec-prod-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/cluster-admin-binding-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/prod-db-shell-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/prod-db-dump-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/kube-secret-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/devcontainer-trust-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/signed-commit-bypass-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/git-history-rewrite-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/artifact-poisoning-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/release-key-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/registry-target-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/unexpected-registry-login-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/public-artifact-secret-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/block-test-deletion.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/test-fixture-secret-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/token-paste-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/repo-mass-harvest-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/binary-payload-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ssh-agent-abuse-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ssh-config-include-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ssh-proxycommand-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ssh-trust-downgrade-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/ssh-authorized-keys-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/shell-profile-persistence-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/scheduled-task-persistence-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/hosts-file-tamper-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/sudoers-tamper-guard.sh" "$TOOL_INPUT"

Matcher: Read|Write|Edit|MultiEdit|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/git-credential-store-guard.sh" "$TOOL_INPUT"

Matcher: Read|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/netrc-credential-guard.sh" "$TOOL_INPUT"

Matcher: Read|Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/registry-credential-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/cloud-key-creation-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/token-broker-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/production-shell-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/desktop-credential-store-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mass-delete-guard.sh" "$TOOL_INPUT"

Matcher: Bash

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/package-publish-guard.sh" "$TOOL_INPUT"

PostToolUse

Matcher: Read

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse Read" "$TOOL_INPUT"

Matcher: WebFetch

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse WebFetch" "$TOOL_INPUT"

Matcher: Bash

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse Bash" "$TOOL_INPUT"

Matcher: Grep

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse Grep" "$TOOL_INPUT"

Matcher: Glob

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse Glob" "$TOOL_INPUT"

Matcher: Task

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse Task" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse mcp__generic" "$TOOL_INPUT"

Matcher: mcp_.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/context-chain-guard.sh PostToolUse mcp_generic" "$TOOL_INPUT"

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/indirect-prompt-injection-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-response-secret-leak-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-response-prompt-smuggling-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-binary-dropper-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-response-suspicious-url-guard.sh" "$TOOL_INPUT"

Matcher: mcp__.*

Hooks:

command

RUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-response-shell-snippet-guard.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/protect-sensitive-files.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/protect-tests.sh" "$TOOL_INPUT"

Matcher: Write|Edit|MultiEdit

Hooks:

commandRUNWALL_HOME="${CLAUDE_PLUGIN_ROOT}" bash "${CLAUDE_PLUGIN_ROOT}/hooks/post-edit-quality-reminder.sh" "$TOOL_INPUT"

Summary

Blocks Task, Read, Edit/Write/Bash tools via Node.js guards on PreToolUse; validates artifacts and telemetry post-Write/Edit. Executes bash, handles file writes.

Similar Hooks

pm-ai-partner

1.9k

2 events · 3 hooks

pm-ai-partner

superpowers-sage

7 events · 8 hooks

superpowers-sage

safety-hooks

1.7k

2 events · 5 hooks

safety-hooks

Stats

Stars13

Forks1

Actions

View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.