NeVibeCode · 11 items
Hooks for Security
Hooks for Security: what each one does, an install command and example prompts.
dependency-checker hook A PostToolUse hook that runs a package audit after you touch a dependency file, so outdated or vulnerable packages surface right away.
2,314installs
security-scanner hook This hook runs a security pass whenever Claude edits or writes a file. It looks for vulnerabilities and hardcoded secrets.
2,256installs
file-protection hook This hook blocks Edit, MultiEdit, and Write when a file path matches one of its patterns. Use it to guard system files and production configuration from accidental edits.
1,668installs
secrets-scanner
official hook Scans the files a Copilot coding agent touched during a session for leaked keys and credentials before they get committed. Useful when the agent edits code fast.
★ 40,451repo stars
governance-audit
official hook Scans GitHub Copilot prompts for threat patterns before execution. It records events to a local JSON log and stops destructive actions based on governance settings.
★ 40,451repo stars
dependency-license-checker
official hook A GitHub Copilot hook that scans newly added dependencies at session end and flags copyleft licenses before they get committed.
★ 40,451repo stars
env-file-protection hook This hook stops Write calls aimed at .env* files, so an agent cannot overwrite your secrets by accident. One command adds it to Claude settings.
279installs
shell-wrapper-guard hook Checks Bash commands for destructive actions concealed in shell wrappers. It helps catch bypasses that direct command checks can miss.
212installs
ai-bash-guard hook An AI agent inspects every bash command before execution, catching destructive patterns like recursive deletes outside /tmp, force pushes to protected branches, database drops, and credential leaks, then blocks them with a reason.
80installs
doordash-group-checkout-gate hook A hook that re-checks allergens at DoorDash group checkout through dd-cli and blocks payment when a dangerous match turns up.
24installs
doordash-allergy-checkout-gate hook This hook checks a DoorDash cart before checkout and blocks the command if the vetted dump is stale, missing, or matches a listed allergen. It guards against agent mistakes, not medical risk.
23installs
