main-hooks

You can enforce safe Bash health checks in CSF NIP by applying a PreToolUse hook that validates commands invoke system_health.py before execution. This gate prevents non-compliant commands from running and guides proper usage.

A PreToolUse hook intercepts commands before execution, applying command matching logic to verify they call system_health.py. This mechanism prevents unsafe or misconfigured Bash commands from running in your environment.

Yes, portable path handling via CLAUDE_PROJECT_DIR ensures health check commands invoking system_health.py work across different environments. This approach maintains consistent enforcement without hardcoding absolute paths.

Your Bash command fails the health check gate because the PreToolUse hook validates that system_health.py is invoked. Commands that bypass this script are blocked to prevent unsafe or misconfigured execution.

Yes, you need Python to run system_health.py, as the enforcement gate uses a Python script to validate Bash commands. The hook implements command matching logic to ensure proper invocation of the health checker.