# Hooks for Security Hooks for Security: what each one does, an install command and example prompts. 11 cards - HTML: https://affpapa.org/en/nevibecode/hooks/topic/security - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [dependency-checker](https://affpapa.org/en/nevibecode/hooks/dependency-checker.md) — hook · davila7 · Claude Code · 2314 installs — A PostToolUse hook that runs a package audit after you touch a dependency file, so outdated or vulnerable packages surface right away. - [security-scanner](https://affpapa.org/en/nevibecode/hooks/security-scanner.md) — hook · davila7 · Claude Code · 2256 installs — This hook runs a security pass whenever Claude edits or writes a file. - [file-protection](https://affpapa.org/en/nevibecode/hooks/file-protection.md) — hook · davila7 · Claude Code · 1668 installs — This hook blocks Edit, MultiEdit, and Write when a file path matches one of its patterns. - [secrets-scanner](https://affpapa.org/en/nevibecode/hooks/secrets-scanner.md) — hook (official GitHub) · github · GitHub Copilot · ★ 40451 — Scans the files a Copilot coding agent touched during a session for leaked keys and credentials before they get committed. - [governance-audit](https://affpapa.org/en/nevibecode/hooks/governance-audit.md) — hook (official GitHub) · github · GitHub Copilot · ★ 40451 — Scans GitHub Copilot prompts for threat patterns before execution. - [dependency-license-checker](https://affpapa.org/en/nevibecode/hooks/dependency-license-checker.md) — hook (official GitHub) · github · GitHub Copilot · ★ 40451 — A GitHub Copilot hook that scans newly added dependencies at session end and flags copyleft licenses before they get committed. - [env-file-protection](https://affpapa.org/en/nevibecode/hooks/env-file-protection.md) — hook · davila7 · Claude Code · 279 installs — This hook stops Write calls aimed at .env* files, so an agent cannot overwrite your secrets by accident. - [shell-wrapper-guard](https://affpapa.org/en/nevibecode/hooks/shell-wrapper-guard.md) — hook · davila7 · Claude Code · 212 installs — Checks Bash commands for destructive actions concealed in shell wrappers. - [ai-bash-guard](https://affpapa.org/en/nevibecode/hooks/ai-bash-guard.md) — hook · davila7 · Claude Code · 80 installs — An AI agent inspects every bash command before execution, catching destructive patterns like recursive deletes outside /tmp, force pushes to protected branches, database drops, and credential leaks, then blocks them wit… - [doordash-group-checkout-gate](https://affpapa.org/en/nevibecode/hooks/doordash-group-checkout-gate.md) — hook · davila7 · Claude Code · 24 installs — A hook that re-checks allergens at DoorDash group checkout through dd-cli and blocks payment when a dangerous match turns up. - [doordash-allergy-checkout-gate](https://affpapa.org/en/nevibecode/hooks/doordash-allergy-checkout-gate.md) — hook · davila7 · Claude Code · 23 installs — This hook checks a DoorDash cart before checkout and blocks the command if the vetted dump is stale, missing, or matches a listed allergen. ## Refine [bash](https://affpapa.org/en/nevibecode/tag/bash.md) · [dependencies](https://affpapa.org/en/nevibecode/tag/dependencies.md) · [shell](https://affpapa.org/en/nevibecode/tag/shell.md) · [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [cargo](https://affpapa.org/en/nevibecode/tag/cargo.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [governance](https://affpapa.org/en/nevibecode/tag/governance.md) · [npm](https://affpapa.org/en/nevibecode/tag/npm.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md