npx claudepluginhub sagart-cactus/claude-k8s-plugin --plugin k8sDefined in hooks/hooks.json
{
"PreToolUse": [
{
"hooks": [
{
"type": "command",
"command": "${CLAUDE_PLUGIN_ROOT}/scripts/context-guard.sh"
}
],
"matcher": "Bash"
}
],
"PostToolUse": [
{
"hooks": [
{
"type": "command",
"command": "${CLAUDE_PLUGIN_ROOT}/scripts/post-edit-check.sh"
}
],
"matcher": "Edit|Write|MultiEdit"
}
]
}"Runs pre-tool checks to block risky Bash/Write/Edit/NotebookEdit calls and post-tool audits afterward, securing shell execution and file writes via bash scripts."