claude-guard

Defined in hooks/hooks.json

{
  "PreToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "${CLAUDE_PLUGIN_ROOT}/hooks/scripts/command-guard.py",
          "timeout": 5
        }
      ],
      "matcher": "Bash"
    }
  ],
  "PostToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "${CLAUDE_PLUGIN_ROOT}/hooks/scripts/credential-scanner.py",
          "timeout": 5
        }
      ],
      "matcher": "Write|Edit|MultiEdit"
    }
  ]
}

"PreToolUse hook runs pre-commit-reminder.sh before git commit/push bash commands. PostToolUse on Write/Edit executes quality-gate.sh and draft-status.sh bash scripts, touching files."