mirror of
https://github.com/borghei/Claude-Skills.git
synced 2026-09-14 19:41:02 +08:00
Brian Borghei
535d2bee4e
Two stdlib-only hooks registered in a shared .claude/settings.json so every session opened on this repo gets them. PreToolUse on Bash blocks commands containing AWS access keys, GitHub PATs, Slack tokens, Anthropic and OpenAI keys, inline PEM private keys, or echo/printf/cat redirections of secret-bearing env vars into .env-style files. Exits 2 with a stderr explanation on match; exits 0 on clean commands and on non-Bash tools. SessionStart hook compares registry.json generated_at against the newest SKILL.md mtime and prints a one-line stale-registry notice if the registry is behind. Fails open silently on any error. standards/security/hook-security-pattern.md documents the threat model, what is in and out of scope, how to extend the patterns, and how to disable temporarily.