Review Claude Code hook scripts for spec compliance, security, and reliability.
npx skills add https://github.com/hjemmesidekongen/ai --skill hook-reviewer
Please help me install this Agent Skill. Skill: hook-reviewer Source: https://github.com/hjemmesidekongen/ai/tree/main/plugins/kronen/skills/hook-reviewer Command: npx skills add https://github.com/hjemmesidekongen/ai --skill hook-reviewer
This Skill ensures that Claude Code hook scripts are correct, secure, and reliable by performing thorough reviews before they are committed or deployed.
Use the hook-reviewer skill to audit the hook script located at plugins/my-plugin/scripts/my-hook.sh.
High-intent search queries and answers about installing and using this skill.
Reviewing hook scripts for security involves a two-stage process that validates spec compliance and checks for vulnerabilities like path traversal, command injection, and credential exposure alongside JSON schema validation.
A two-stage hook review validates spec compliance against official event types and exit codes, then performs quality checks for security vulnerabilities, error handling, and parallel execution safety.
Validate hook event types and exit codes by checking scripts against official specifications to ensure correct semantics, proper JSON output schemas, and adherence to defined testing hierarchies before merging.
Yes, the hook review process assesses parallel execution safety and performance by evaluating error handling and reliability against defined standards to ensure secure concurrent execution.
Review hook scripts for path traversal and command injection before merging or deploying new hooks, especially when they handle user permissions or interact with file systems and external commands.
hjemmesidekongenCreate and validate Claude Code hooks with correct JSON and shell practices.
SpandanM110Review code for correctness, security vulnerabilities, and performance issues.
macaughDetects injection, memory safety and authorization flaws in multiple languages.
gztcodeDispatch tasks to fresh subagents and review for spec compliance and code quality.
