hook-manager
Manages automation hooks for Claude Code and Opencode, enabling users to install, list, and configure hooks for enhanced functionality.
Install this skill
Security score
The hook-manager skill was audited on Feb 12, 2026 and we found 22 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 31 | mkdir -p ~/.claude/hooks |
Access to hidden dotfiles in home directory
| 34 | cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/<hook-name>.json ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 40 | mkdir -p ~/.opencode/hooks |
Access to hidden dotfiles in home directory
| 43 | cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/<hook-name>.json ~/.opencode/hooks/ |
Access to hidden dotfiles in home directory
| 115 | rm ~/.claude/hooks/<hook-name>.json |
Access to hidden dotfiles in home directory
| 120 | rm ~/.opencode/hooks/<hook-name>.json |
Access to hidden dotfiles in home directory
| 129 | ls ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 134 | ls ~/.opencode/hooks/ |
Access to hidden dotfiles in home directory
| 142 | cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/protect-env-files.json ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 145 | cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/uncommitted-reminder.json ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 146 | cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/auto-git-add.json ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 149 | cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/time-dir-context.json ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 152 | cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/lint-on-save.json ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 153 | cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/lint-on-start.json ~/.claude/hooks/ |
Access to hidden dotfiles in home directory
| 159 | cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/protect-env-files.json ~/.opencode/hooks/ |
Access to hidden dotfiles in home directory
| 162 | cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/uncommitted-reminder.json ~/.opencode/hooks/ |
Access to hidden dotfiles in home directory
| 163 | cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/auto-git-add.json ~/.opencode/hooks/ |
Access to hidden dotfiles in home directory
| 166 | cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/time-dir-context.json ~/.opencode/hooks/ |
Access to hidden dotfiles in home directory
| 169 | cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/lint-on-save.json ~/.opencode/hooks/ |
Access to hidden dotfiles in home directory
| 170 | cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/lint-on-start.json ~/.opencode/hooks/ |
Access to .env file
| 15 | | `protect-env-files` | PreToolUse | Blocks edits to .env files (security) | Recommended | |
Access to .env file
| 54 | - Blocks: `.env`, `.env.local`, `.env.production`, `.env.staging` |