Is hook-development safe?

This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentions hook events (PreToolUse, PostToolUse, Stop, SubagentStop, SessionStart, SessionEnd, UserPromptSubmit, PreCompact, Notification). Provides comprehensive guidance for creating and implementing Claude Code plugin hooks with focus on advanced prompt-based hooks API.

Content hash

sha256:645982aa6a62aa0049ddc61b8365130060a95ba723b0d710622fee07942e1625

Files

11

Quality

100/100

Security findings

• mediumDestructive commandSL302 · plugins/plugin-dev/skills/hook-development/examples/validate-bash.sh:31
  if [[ "$command" == *"dd if="* ]] || [[ "$command" == *"mkfs"* ]] || [[ "$command" == *"> /dev/"* ]]; then

  The command can wipe files, disks or shared history. Fix: Scope the command to a temp directory the skill created, and confirm with the user first. Severity lowered: the line reads as documentation, not an instruction.

• mediumDestructive commandSL302 · plugins/plugin-dev/skills/hook-development/references/migration.md:66
  "prompt": "Command: $TOOL_INPUT.command. Analyze for: 1) Destructive operations (rm -rf, dd, mkfs, etc) 2) Privilege escalation (sudo) 3) Network operations wi…

  The command can wipe files, disks or shared history. Fix: Scope the command to a temp directory the skill created, and confirm with the user first. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · plugins/plugin-dev/skills/hook-development/references/advanced.md:278
  curl -X POST "$SLACK_WEBHOOK" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · plugins/plugin-dev/skills/hook-development/references/advanced.md:308
  echo "hook.pretooluse.${tool_name}:1|c" | nc -u -w1 statsd.local 8125

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowDestructive commandSL302 · plugins/plugin-dev/skills/hook-development/references/migration.md:51
  - Misses other dangerous commands (`dd`, `mkfs`, etc.)

  The command can wipe files, disks or shared history. Fix: Scope the command to a temp directory the skill created, and confirm with the user first. Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · plugins/plugin-dev/skills/hook-development/references/patterns.md:202
  npx eslint "$file_path" 2>&1 || true

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Quality

• infoSKILL.md is longSL705 · plugins/plugin-dev/skills/hook-development/SKILL.md:1
  713 lines

  Long skills spend context on every load. Fix: Keep SKILL.md under 500 lines and move reference material into linked files.