Skip to main content

claude-code-hooks

Enables event-driven automation in Claude Code, allowing for custom hooks and integration with CI/CD pipelines.

Install this skill

or
77/100

Security score

The claude-code-hooks skill was audited on Feb 9, 2026 and we found 5 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 479

Piping content to bash shell

SourceSKILL.md
479| bash .claude/hooks/post-tool-format.sh
low line 194

Access to .env file

SourceSKILL.md
194# Remove .env files from staging
low line 195

Access to .env file

SourceSKILL.md
195SAFE_CMD="$(echo "$CMD" | sed 's/\.env[^ ]*//g')"
low line 201

Access to .env file

SourceSKILL.md
201permissionDecisionReason: "Removed .env from git add",
medium line 358

Hex-encoded characters

SourceSKILL.md
358if grep -qE '(password|secret|api_key|token)\s*[:=]\s*["\x27][^"\x27]+["\x27]' "$FILE_PATH"; then
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →