security-hooks

Defined in hooks/hooks.json

{
  "PreToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "${CLAUDE_PLUGIN_ROOT}/scripts/validate-commands.js",
          "timeout": 30
        }
      ],
      "matcher": "Bash",
      "description": "Validate commands before execution"
    }
  ],
  "PostToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "${CLAUDE_PLUGIN_ROOT}/scripts/lint-check.js",
          "timeout": 30
        }
      ],
      "matcher": "Write|Edit",
      "description": "Lint check after file modifications"
    },
    {
      "hooks": [
        {
          "type": "command",
          "command": "${CLAUDE_PLUGIN_ROOT}/scripts/type-check.js",
          "timeout": 30
        }
      ],
      "matcher": "Write|Edit",
      "description": "Type check TypeScript files"
    }
  ]
}

{
  "riskFlags": {
    "touchesBash": true,
    "matchAllTools": false,
    "touchesFileWrites": true
  },
  "typeStats": {
    "command": 3
  },
  "eventStats": {
    "PreToolUse": 1,
    "PostToolUse": 2
  },
  "originCounts": {
    "absolutePaths": 0,
    "pluginScripts": 3,
    "projectScripts": 0
  },
  "timeoutStats": {
    "commandsWithoutTimeout": 0
  }
}