hook-reviewer

Review Claude Code hook scripts for spec compliance, security, and reliability.

1|Updated Mar 1, 2026

Search Tags:#security #validation #auditing #review #scripting #hook

Ready to run

npx skills add https://github.com/hjemmesidekongen/ai --skill hook-reviewer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hook-reviewer
Source: https://github.com/hjemmesidekongen/ai/tree/main/plugins/kronen/skills/hook-reviewer
Command: npx skills add https://github.com/hjemmesidekongen/ai --skill hook-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures that Claude Code hook scripts are correct, secure, and reliable by performing thorough reviews before they are committed or deployed.

Core Features & Use Cases

Spec Compliance: Validates hooks against official event types, exit code semantics, and JSON output schemas.
Security Auditing: Checks for vulnerabilities like path traversal, command injection, and credential exposure.
Reliability & Performance: Assesses error handling, performance, and parallel execution safety.
Use Case: Before merging a new hook that handles user permissions, use this Skill to automatically audit it for security flaws and ensure it adheres to all defined specifications.

Quick Start

Use the hook-reviewer skill to audit the hook script located at plugins/my-plugin/scripts/my-hook.sh.

Frequently Asked Questions about hook-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit Claude Code hook scripts for security vulnerabilities?▼

Reviewing hook scripts for security involves a two-stage process that validates spec compliance and checks for vulnerabilities like path traversal, command injection, and credential exposure alongside JSON schema validation.

What is a two-stage hook review process for script correctness?▼

A two-stage hook review validates spec compliance against official event types and exit codes, then performs quality checks for security vulnerabilities, error handling, and parallel execution safety.

How do I validate hook event types and exit codes before deployment?▼

Validate hook event types and exit codes by checking scripts against official specifications to ensure correct semantics, proper JSON output schemas, and adherence to defined testing hierarchies before merging.

Does the hook review process check for parallel execution safety and performance?▼

Yes, the hook review process assesses parallel execution safety and performance by evaluating error handling and reliability against defined standards to ensure secure concurrent execution.

When do I need to review hook scripts for path traversal and command injection?▼

Review hook scripts for path traversal and command injection before merging or deploying new hooks, especially when they handle user permissions or interact with file systems and external commands.