المهارات claude-code-hooks
�
claude-code-hooks
آمن ⚙️
الأوامر الخارجية📁
الوصول إلى نظام الملفات🔑
متغيرات البيئة🌐
الوصول إلى الشبكة
Domine os hooks do Claude Code
متاح أيضًا من: 0xDarkMatter
Personalize o comportamento do Claude Code com hooks de pré e pós-execução de ferramentas. Valide comandos, audite atividades e imponha políticas automaticamente. Esta skill de documentação fornece guias de referência completos e padrões de segurança para uso em produção.
يدعم: Code(CC)
1
تنزيل ZIP المهارة
2
رفع في Claude
اذهب إلى Settings → Capabilities → Skills → Upload skill
3
فعّل وابدأ الاستخدام
اختبرها
استخدام "claude-code-hooks". Como bloqueio comandos bash perigosos com um hook?
النتيجة المتوقعة:
- Crie um hook PreToolUse que analisa entrada JSON e verifica padrões perigosos
- Código de saída 2 bloqueia o comando, código de saída 0 permite
- Corresponda ferramentas específicas com padrões como "Bash" ou "*" para todas as ferramentas
استخدام "claude-code-hooks". Como audito todo o uso de ferramentas?
النتيجة المتوقعة:
- Configure um hook PostToolUse com correspondência "*" para capturar todas as chamadas de ferramentas
- Analise a entrada JSON para extrair nome da ferramenta, entrada e saída
- Escreva logs sanitizados em um diretório de auditoria dedicado
استخدام "claude-code-hooks". Quais medidas de segurança devo implementar?
النتيجة المتوقعة:
- Sempre coloque variáveis entre aspas para prevenir injeção de comandos
- Valide a estrutura JSON antes do processamento
- Bloqueie tentativas de travessia de caminho verificando ".." em caminhos
التدقيق الأمني
آمنv3 • 1/16/2026
This is a pure documentation skill containing only markdown reference files. All static findings are FALSE POSITIVES - the scanner detected shell command patterns in documentation examples showing safe hook script patterns. There is NO executable code, network calls, or file system access beyond documentation files. The skill documents Claude Code's built-in hook system and teaches security best practices.
5
الملفات التي تم فحصها
1,092
الأسطر التي تم تحليلها
4
النتائج
3
إجمالي عمليات التدقيق
عوامل الخطر
⚙️ الأوامر الخارجية (183)
references/configuration.md:9 references/configuration.md:10 references/configuration.md:16-33 references/configuration.md:33-37 references/configuration.md:37-62 references/configuration.md:62-68 references/configuration.md:68-72 references/configuration.md:72-76 references/configuration.md:76-80 references/configuration.md:80-84 references/configuration.md:84-87 references/configuration.md:87-91 references/configuration.md:91-105 references/configuration.md:105-111 references/configuration.md:111-117 references/configuration.md:117-123 references/configuration.md:123-125 references/configuration.md:125-137 references/configuration.md:137-143 references/configuration.md:143-157 references/configuration.md:157-163 references/configuration.md:163-172 references/configuration.md:172-176 references/configuration.md:176-178 references/configuration.md:178-190 references/configuration.md:190-196 references/configuration.md:196-208 references/configuration.md:208-212 references/configuration.md:212-225 references/configuration.md:225-229 references/configuration.md:229-240 references/configuration.md:240-245 references/configuration.md:245-247 references/configuration.md:247-250 references/configuration.md:250-253 references/configuration.md:253-256 references/configuration.md:256-258 references/configuration.md:258-261 references/configuration.md:261-263 references/configuration.md:145 references/configuration.md:146 references/configuration.md:143-157 references/configuration.md:144 references/configuration.md:164 references/hook-events.md:7-9 references/hook-events.md:9-16 references/hook-events.md:16-25 references/hook-events.md:25-34 references/hook-events.md:34-44 references/hook-events.md:44-51 references/hook-events.md:51-64 references/hook-events.md:64-73 references/hook-events.md:73-81 references/hook-events.md:81-88 references/hook-events.md:88-97 references/hook-events.md:97-109 references/hook-events.md:109-115 references/hook-events.md:115-126 references/hook-events.md:126-131 references/hook-events.md:131-143 references/hook-events.md:143-149 references/hook-events.md:149-161 references/hook-events.md:161-168 references/hook-events.md:168-179 references/hook-events.md:179-185 references/hook-events.md:185-196 references/hook-events.md:196-202 references/hook-events.md:202-210 references/hook-events.md:210-215 references/hook-events.md:215-222 references/hook-events.md:222-228 references/hook-events.md:228-249 references/hook-events.md:249-250 references/hook-events.md:250-251 references/hook-events.md:36 references/hook-events.md:37 references/hook-events.md:75 references/hook-events.md:77 references/hook-events.md:78 references/hook-events.md:80 references/hook-events.md:214 references/hook-events.md:34-44 references/hook-events.md:73-81 references/hook-events.md:210-215 references/hook-events.md:35 references/hook-events.md:74 references/hook-events.md:211 references/security-patterns.md:9-26 references/security-patterns.md:26-30 references/security-patterns.md:30-39 references/security-patterns.md:39-43 references/security-patterns.md:43-60 references/security-patterns.md:60-64 references/security-patterns.md:64-85 references/security-patterns.md:85-91 references/security-patterns.md:91-101 references/security-patterns.md:101-105 references/security-patterns.md:105-117 references/security-patterns.md:117-121 references/security-patterns.md:121-154 references/security-patterns.md:154-158 references/security-patterns.md:158-168 references/security-patterns.md:168-172 references/security-patterns.md:172-190 references/security-patterns.md:190-194 references/security-patterns.md:194-203 references/security-patterns.md:203-207 references/security-patterns.md:207-222 references/security-patterns.md:222-239 references/security-patterns.md:239-264 references/security-patterns.md:13 references/security-patterns.md:21 references/security-patterns.md:45 references/security-patterns.md:46 references/security-patterns.md:55 references/security-patterns.md:66 references/security-patterns.md:67 references/security-patterns.md:93 references/security-patterns.md:99 references/security-patterns.md:100 references/security-patterns.md:127 references/security-patterns.md:128 references/security-patterns.md:136 references/security-patterns.md:186 references/security-patterns.md:209 references/security-patterns.md:213 references/security-patterns.md:214 references/security-patterns.md:215 references/security-patterns.md:220 references/security-patterns.md:257 references/security-patterns.md:9-26 references/security-patterns.md:43-60 references/security-patterns.md:64-85 references/security-patterns.md:91-101 references/security-patterns.md:121-154 references/security-patterns.md:172-190 references/security-patterns.md:207-222 references/security-patterns.md:239-264 references/security-patterns.md:10 references/security-patterns.md:44 references/security-patterns.md:65 references/security-patterns.md:92 references/security-patterns.md:106 references/security-patterns.md:122 references/security-patterns.md:159 references/security-patterns.md:173 references/security-patterns.md:208 references/security-patterns.md:240 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:31 SKILL.md:31 SKILL.md:33-46 SKILL.md:46-52 SKILL.md:52-53 SKILL.md:53 SKILL.md:53-54 SKILL.md:54-55 SKILL.md:55-59 SKILL.md:59-69 SKILL.md:69-82 SKILL.md:82 SKILL.md:82-83 SKILL.md:83-84 SKILL.md:84-90 SKILL.md:90-99 SKILL.md:99-108 SKILL.md:108-109 SKILL.md:109-110 SKILL.md:110-114 SKILL.md:114 SKILL.md:62 SKILL.md:63 SKILL.md:59-69 SKILL.md:60
📁 الوصول إلى نظام الملفات (28)
references/configuration.md:9 references/configuration.md:246 references/configuration.md:9 references/configuration.md:132 references/configuration.md:203 references/configuration.md:219 references/configuration.md:235 references/configuration.md:246 references/hook-events.md:76 references/hook-events.md:213 references/hook-events.md:213 references/security-patterns.md:199 references/security-patterns.md:100 references/security-patterns.md:108 references/security-patterns.md:109 references/security-patterns.md:199 references/security-patterns.md:210 references/security-patterns.md:16 references/security-patterns.md:55 references/security-patterns.md:116 references/security-patterns.md:180 references/security-patterns.md:254 references/security-patterns.md:258 references/security-patterns.md:73 references/security-patterns.md:96 references/security-patterns.md:123 SKILL.md:31 SKILL.md:31
🔑 متغيرات البيئة (2)
🌐 الوصول إلى الشبكة (3)
تم تدقيقه بواسطة: claude عرض سجل التدقيق →
درجة الجودة
45
الهندسة المعمارية
100
قابلية الصيانة
87
المحتوى
21
المجتمع
100
الأمان
91
الامتثال للمواصفات
ماذا يمكنك بناءه
Validar e bloquear comandos perigosos
Crie hooks PreToolUse para validar comandos Bash e bloquear operações destrutivas como rm -rf ou mkfs antes da execução.
Auditar toda a atividade de ferramentas
Configure hooks PostToolUse para registrar cada comando, alteração de arquivo e saída de ferramenta em logs de auditoria para conformidade e depuração.
Impor padrões de codificação
Use padrões de correspondência para executar linters, formatadores ou scanners de segurança em ferramentas específicas antes de permitir a execução.
جرّب هذه الموجهات
Fundamentos de hooks
Quais eventos de hook o Claude Code suporta e quando eles são disparados? Explique PreToolUse vs PostToolUse.
Configuração
Como configuro hooks no settings.json? Mostre-me a estrutura JSON exata para um hook PreToolUse em comandos Bash.
Padrões de segurança
Quais são as melhores práticas de segurança para escrever scripts de hook? Como previno injeção de comandos e travessia de caminho?
Uso em produção
Mostre-me um script de hook pronto para produção que inclua validação de entrada, tratamento adequado de erros, limitação de taxa e log de auditoria.
أفضل الممارسات
- Sempre valide a estrutura de entrada JSON antes do processamento para prevenir erros
- Coloque todas as variáveis entre aspas em scripts shell para prevenir injeção de comandos
- Use $CLAUDE_PROJECT_DIR para caminhos para garantir que scripts funcionem em diferentes ambientes
تجنب
- Usar variáveis sem aspas que permitem ataques de injeção de comandos
- Pular validação de entrada e confiar em entradas de ferramentas fornecidas pelo usuário
- Armazenar segredos em scripts de hook ou registrar dados sensíveis
الأسئلة المتكررة
Quais versões do Claude suportam hooks?
Claude Code CLI versão 0.28 e posteriores suportam o sistema de hooks através da configuração settings.json.
Qual é o timeout máximo de hook?
O timeout padrão é 5000ms. Você pode configurar timeouts mais longos até limites práticos na definição do hook.
Hooks podem chamar outras ferramentas do Claude Code?
Hooks executam como scripts externos e não podem invocar diretamente ferramentas do Claude Code. Eles executam como processos independentes.
A saída do hook é registrada?
O stderr do hook aparece na saída do Claude quando está bloqueando. Stdout é capturado mas não registrado por padrão.
Por que meu hook não está disparando?
Verifique se os padrões de correspondência estão corretos, se o arquivo é executável e se o JSON no settings.json é válido usando jq para validação.
Como hooks são diferentes de MCP?
Hooks executam antes ou depois de chamadas de ferramentas para validação e registro. MCP fornece novas ferramentas. Hooks funcionam com ferramentas existentes.