Skills hooks-automation

📦

hooks-automation

Name: hooks-automation
Author: DNYoussef

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access

Automate Claude Code Hooks

Manual hook setup can be hard to coordinate across agents, sessions, Git, and memory tools. This skill provides structured examples for Claude Code hook automation with Claude Flow and MCP workflows.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "hooks-automation" from https://skillstore.io/skills/dnyoussef-hooks-automation.md and its manifest at https://skillstore.io/api/skills/dnyoussef-hooks-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/dnyoussef-hooks-automation.md Signed manifest GET /api/skills/dnyoussef-hooks-automation/manifest Signed lockfile GET /api/skills/dnyoussef-hooks-automation/lockfile

Test it

Using "hooks-automation". Set up hooks for a small JavaScript project.

Expected outcome:

A recommended hook plan with edit validation, post-edit formatting, test triggers, and notes about safe argument handling.

Using "hooks-automation". Coordinate three agents during a refactor.

Expected outcome:

A staged workflow using pre-task preparation, memory keys, post-task summaries, and session persistence.

Using "hooks-automation". Troubleshoot hooks that time out.

Expected outcome:

A checklist covering timeout settings, async hooks, command performance, MCP connectivity, and debug logs.

Security Audit

High Risk

v11 • 7/9/2026 Open versioned report

Most static findings are false positives caused by Markdown code fences, inline command examples, and documentation-only shell snippets. The main security issue is that several hook configuration examples interpolate tool parameters into shell command strings, which can create command injection risk if copied directly.

Files scanned

1,202

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:409-440 SKILL.md:452-540 SKILL.md:575-584

Shell Command Injection in Hook Configuration Examples

The hook configuration examples place tool parameters such as file paths, Bash commands, task text, and search patterns directly inside shell command strings. Users who copy these examples can expose their hooks to command injection when those values contain shell metacharacters.

The examples show direct interpolation like ${tool.params.file_path}, ${tool.params.command}, and pattern-derived paths inside shell command fields. Claude Code hook commands execute through a shell, so copied examples can become injection-prone.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:409-446

Ruby/shell backtick execution

```json

The documented hook configuration runs shell commands containing Claude Code parameter interpolation. If copied directly, untrusted file paths, patterns, or task text can be injected into command strings.

High

SKILL.md:452-547

Ruby/shell backtick execution

```json

High

SKILL.md:553-569

Ruby/shell backtick execution

```json

High

SKILL.md:575-592

Ruby/shell backtick execution

```json

Risk Factors

⚙️ External commands (50)

SKILL.md:26 SKILL.md:28 SKILL.md:39-42 SKILL.md:42-45 SKILL.md:45-46 SKILL.md:46-51 SKILL.md:51-60 SKILL.md:60-73 SKILL.md:73-87 SKILL.md:87-96 SKILL.md:96-108 SKILL.md:108-117 SKILL.md:117-131 SKILL.md:131-140 SKILL.md:140-150 SKILL.md:150-162 SKILL.md:162-176 SKILL.md:176-185 SKILL.md:185-196 SKILL.md:196-205 SKILL.md:205-219 SKILL.md:219-228 SKILL.md:228-239 SKILL.md:239-251 SKILL.md:251-258 SKILL.md:258-261 SKILL.md:261-268 SKILL.md:268-271 SKILL.md:271-278 SKILL.md:278-281 SKILL.md:281-288 SKILL.md:288-293 SKILL.md:293-299 SKILL.md:299-302 SKILL.md:302-308 SKILL.md:308-311 SKILL.md:311-319 SKILL.md:319-324 SKILL.md:324-337 SKILL.md:337-340 SKILL.md:340-351 SKILL.md:351-360 SKILL.md:360-374 SKILL.md:374-383 SKILL.md:383-395 SKILL.md:395-407 SKILL.md:407-409 SKILL.md:409-446 SKILL.md:446-452 SKILL.md:452-547

📁 Filesystem access (1)

SKILL.md:106

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/dnyoussef-hooks-automation/audits/11?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dnyoussef-hooks-automation/security.svg)](https://skillstore.io/skills/dnyoussef-hooks-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/dnyoussef-hooks-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dnyoussef-hooks-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/dnyoussef-hooks-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

DNYoussef. (2026). hooks-automation security audit report (audit version 11) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dnyoussef-hooks-automation/audits/11

BibTeX citation

@techreport{dnyoussef-dnyoussef-hooks-automation-2026,
  author = {DNYoussef},
  title = {hooks-automation security audit report (audit version 11)},
  institution = {Skillstore},
  year = {2026},
  number = {11},
  url = {https://skillstore.io/skills/dnyoussef-hooks-automation/audits/11},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "hooks-automation security audit report (audit version 11)"
version: "unspecified"
type: report
authors:
  - name: "DNYoussef"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/dnyoussef-hooks-automation/audits/11"
identifiers:
  - type: other
    value: "skillstore:dnyoussef-hooks-automation:audit:11"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

ruvnet Recommended

ruvnet-hooks-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

DNYoussef Current

dnyoussef-hooks-automation

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Standardize team hook setup

Create a shared Claude Code hook configuration for formatting, validation, and session tracking.

Coordinate multi-agent workflows

Use hook events to store task context, update agent state, and persist decisions across sessions.

Add Git quality gates

Connect pre-commit and pre-push checks to validation, formatting, tests, and reporting flows.

Try These Prompts

Start basic hooks

Use the hooks-automation skill to explain the simplest safe Claude Code hook setup for my project.

Configure edit hooks

Using hooks-automation, draft a safe PreToolUse and PostToolUse plan for validating and formatting edited files.

Design session memory flow

Use hooks-automation to design a session-start and session-end workflow that saves summaries and restores context.

Audit advanced hook automation

Review my proposed Claude Code hook configuration using hooks-automation and identify command injection or secret logging risks.

Best Practices

Review every hook command before enabling it in a shared repository.
Use wrapper scripts or structured inputs instead of direct shell interpolation.
Keep hooks fast, observable, and limited to the minimum required automation.

Avoid

Do not copy shell interpolation examples into production without escaping and validation.
Do not log secrets, environment file contents, or full command output by default.
Do not make heavy checks block every tool call when asynchronous hooks would work.

Frequently Asked Questions

What does this skill help automate?

It helps plan Claude Code hooks for validation, formatting, memory coordination, session persistence, Git checks, and MCP workflows.

Does it install hooks automatically?

No. It documents commands and settings examples that users must adapt and review before enabling.

Which tools does it reference?

It references Claude, Codex, Claude Code, Claude Flow CLI, Git hooks, and MCP coordination tools.

Is it safe to copy every example directly?

No. Some examples interpolate parameters into shell commands and should be rewritten with safer argument handling.

Can it coordinate swarm agents?

Yes. The documentation describes memory keys, session hooks, and MCP events for multi-agent coordination.

What should I review first?

Review shell commands, environment-file handling, logging behavior, timeouts, and permissions before enabling hooks.

Developer Details

Author

DNYoussef

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/hooks-automation

Ref

1ffa7643651792ccb4bd3b15d924d2c97edff755

Maintenance freshness

7/18/2026

Usage

5 downloads · 194 views

File structure

📄 SKILL.md