setup-toolchain

Enforce Bun and tsgo toolchain usage by blocking npm, npx, tsc, and global installs.

3|1|Updated Mar 23, 2026

Search Tags:#security #hooks #claude #bun #toolchain #pretooluse #tsgo

Ready to run

npx skills add https://github.com/malinskibeniamin/skills --skill setup-toolchain

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: setup-toolchain
Source: https://github.com/malinskibeniamin/skills/tree/main/setup-toolchain
Command: npx skills add https://github.com/malinskibeniamin/skills --skill setup-toolchain

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, and includes scripts (resource) components.

What problem does it solve?

Automates enforcement of a consistent toolchain by blocking unsafe commands and drift across development environments, focusing on Bun + tsgo usage.

Core Features & Use Cases

PreToolUse hooks block npm, npx, tsc, and global installs to prevent toolchain drift.
SessionStart hooks set environment defaults and guard resources to keep sessions predictable.
Project-level configuration via .claude/settings.json to apply rules across repositories.
Verification steps ensure hook scripts exist, are executable, and properly wired.

Quick Start

Create hook scripts by copying scripts/enforce-toolchain.sh and scripts/session-env.sh into .claude/hooks, make them executable, and configure .claude/settings.json to enable PreToolUse and SessionStart.

Frequently Asked Questions about setup-toolchain

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce Bun and tsgo usage while blocking npm and tsc in a project?▼

You can enforce the Bun and tsgo toolchain by configuring PreToolUse hooks that block npm, npx, tsc, and global installs. This prevents toolchain drift by intercepting unsafe commands before they execute in your project workspaces.

What do PreToolUse and SessionStart hooks do for toolchain consistency?▼

PreToolUse hooks block commands like npm and tsc to prevent toolchain drift, while SessionStart hooks set environment defaults and guard resources. Together they keep development sessions predictable and ensure teams use Bun and tsgo consistently.

How do I set up Claude hooks to prevent npm and global package installs?▼

Copy the provided shell scripts into your .claude/hooks directory, make them executable, and configure .claude/settings.json to enable the hooks. This setup intercepts and blocks npm, npx, tsc, and global installs across your repositories.

Do I need jq installed to use the toolchain enforcement hooks?▼

Yes, jq is a required dependency for this toolchain enforcement setup. You need jq installed in your environment to run the hook scripts that block unsafe commands and enforce Bun and tsgo usage.

What is the best way to verify that toolchain enforcement hooks are working?▼

The setup includes verification steps to ensure hook scripts exist, are executable, and are properly wired into .claude/settings.json. Running these checks confirms your PreToolUse and SessionStart hooks will successfully block toolchain drift.

Why should I block npx and tsc commands in a Bun and tsgo project?▼

Blocking npx and tsc commands prevents toolchain drift across development environments. Enforcing Bun and tsgo exclusively ensures consistent dependency management and type checking across all team members working in the project.