developer-kit

Defined in hooks/hooks.json

{
  "PreToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "${CLAUDE_PLUGIN_ROOT}/hooks/prevent-destructive-commands.py",
          "statusMessage": "Checking command safety..."
        }
      ],
      "matcher": "Bash"
    }
  ]
}

"Sandboxes specific Bash tool calls invoking 'bun ${CLAUDE_PLUGIN_ROOT}/scripts/*' by running 'bun ${CLAUDE_PLUGIN_ROOT}/hooks/sandbox.ts' first. Secures script executions, touches bash, no file writes."