security-guidance

Defined in hooks/hooks.json

{
  "PreToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/security_reminder_hook.py"
        }
      ],
      "matcher": "Edit|Write|MultiEdit"
    }
  ]
}

"Validates ACL policy via lint-acl.sh before Write or Edit tool calls, blocking file modifications until check passes. 10s timeout, touches files."