dotclaude

Plugin security ยท 3 hooks

security-hooks

Deterministic guardrails, active immediately after install: a compound-command deny list, sensitive-file protection, and prompt-injection screening.

hooksguardrailsdeny-listprompt-injection

Install

Add the marketplace once, then install the bundle. Claude Code namespaces its commands (/security-hooks:name), wires any hooks, and updates it with /plugin marketplace update dotclaude.

/plugin marketplace add KhaledSaeed18/dotclaude
/plugin install security-hooks@dotclaude

What you get

Hooks (3)

  • smart-approveA PreToolUse hook that splits compound Bash commands (&&, ||, ;, |, $(), backticks, subshells) into their parts and checks each against the same deny list...
  • sensitive-file-guardA PreToolUse hook that blocks Read, Edit, Write, MultiEdit, and Bash operations that target sensitive files (.env, credentials, SSH private keys...
  • injection-guardA UserPromptSubmit hook that scans incoming prompts for prompt-injection and jailbreak patterns (instruction overrides, system-prompt extraction attempts...