Skills hooks-management
📦

hooks-management

Content revision r1 Safe ⚙️ External commands📁 Filesystem access🔑 Env variables

Manage Claude Code Hooks Safely

Claude Code hooks are powerful but easy to configure incorrectly. This skill guides hook creation, validation, and troubleshooting with security checks.

Supports: Claude Codex Code(CC)
📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "hooks-management" from https://skillstore.io/skills/emz1998-hooks-management.md and its manifest at https://skillstore.io/api/skills/emz1998-hooks-management/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/emz1998-hooks-management.md Signed manifest GET /api/skills/emz1998-hooks-management/manifest Signed lockfile GET /api/skills/emz1998-hooks-management/lockfile

Test it

Using "hooks-management". Create a hook that validates changed Markdown files after edits.

Expected outcome:

A hook plan with event selection, matcher scope, script location, validation behavior, test steps, and enablement notes.

Using "hooks-management". Review an existing hook that blocks unsafe shell commands.

Expected outcome:

An audit summary covering command parsing, blocked patterns, exit behavior, error messages, and recommended fixes.

Using "hooks-management". Troubleshoot a hook that does not run on file writes.

Expected outcome:

A diagnostic report covering settings placement, matcher names, executable permissions, command paths, and debug log checks.

Security Audit

Safe
v4 • 7/5/2026 Open versioned report

I adjudicated all 52 static findings as false positives because they occur in Markdown code spans or reference examples, not executable skill code. No prompt injection, credential exfiltration, or malicious hook behavior was found. The skill remains security-sensitive by purpose because it helps create Claude Code hooks, so user review should stay visible.

3
Files scanned
1,755
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (8)
references/hooks.md:412 references/hooks.md:419 references/hooks.md:394 references/hooks.md:410 SKILL.md:10 SKILL.md:11 SKILL.md:12 SKILL.md:15
📁 Filesystem access (36)
references/hooks.md:470 references/hooks.md:490 references/hooks.md:512 references/hooks.md:526 references/hooks.md:543 references/hooks.md:558 references/hooks.md:571 references/hooks.md:583 references/hooks.md:13 references/hooks.md:415 references/hooks.md:543 references/hooks.md:558 references/hooks.md:571 references/hooks.md:583 references/hooks.md:13 references/hooks.md:87 references/hooks.md:399 references/hooks.md:415 references/hooks.md:470 references/hooks.md:490 references/hooks.md:512 references/hooks.md:526 references/hooks.md:543 references/hooks.md:558 references/hooks.md:571 references/hooks.md:583 references/input-patterns.md:36 references/input-patterns.md:54 references/input-patterns.md:72 references/input-patterns.md:78 references/input-patterns.md:96 references/input-patterns.md:120 references/input-patterns.md:140 references/input-patterns.md:160 references/input-patterns.md:290 references/input-patterns.md:317
🔑 Env variables (1)
references/hooks.md:398
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/emz1998-hooks-management/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/emz1998-hooks-management/security.svg)](https://skillstore.io/skills/emz1998-hooks-management?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/emz1998-hooks-management?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/emz1998-hooks-management/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/emz1998-hooks-management.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

Emz1998. (2026). hooks-management security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/emz1998-hooks-management/audits/4

BibTeX citation

@techreport{emz1998-emz1998-hooks-management-2026, author = {Emz1998}, title = {hooks-management security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/emz1998-hooks-management/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "hooks-management security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "Emz1998" date-released: "2026-07-05" url: "https://skillstore.io/skills/emz1998-hooks-management/audits/4" identifiers: - type: other value: "skillstore:emz1998-hooks-management:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
41
Architecture
85
Maintainability
85
Content
69
Community
91
Spec Compliance

What You Can Build

Add a Project Hook

Create a hook that runs formatting or validation after file edits in a project.

Standardize Team Automation

Review hook settings and align event coverage across shared development workflows.

Audit Existing Hooks

Inspect hook scripts for unsafe commands, missing validation, and loop risks.

Try These Prompts

Create a Basic Hook 
Create a Claude Code hook that runs our existing formatter after Write and Edit events. Include testing and safety checks.
Validate Hook Inputs 
Review my hook input handling for malformed data, missing fields, and clear error reporting. Suggest focused fixes.
Troubleshoot a Failing Hook 
Diagnose why my Claude Code hook is not triggering. Check matcher names, settings syntax, command paths, and permissions.
Design a Secure Hook Set 
Design a secure hook strategy for validation, notifications, and session setup. Include threat risks and rollout steps.

Best Practices

  • Keep hook commands narrow, explicit, and easy to review.
  • Validate input fields before reading paths or running commands.
  • Test hooks in a safe project before enabling them broadly.

Avoid

  • Hardcoding credentials or tokens in hook scripts.
  • Auto-approving sensitive actions without clear user review.
  • Writing hooks that can trigger themselves repeatedly.

Frequently Asked Questions

What does this skill help manage?
It helps create, update, validate, and troubleshoot Claude Code hooks and related local settings.
Does it execute hooks automatically?
The skill guides hook creation and testing. Claude Code executes enabled hooks according to the user configuration.
Can it work with existing hook scripts?
Yes. It can review existing scripts and settings before proposing targeted updates.
Is it safe for secrets?
No. Hook scripts should not hardcode credentials, tokens, or private keys.
Which tools are supported?
The report lists support for Claude, Codex, and Claude Code.
What should users review before enabling hooks?
Users should review changed files, command paths, input validation, timeouts, and any automatic approval behavior.

Developer Details

Author

Emz1998

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/Emz1998/avaris-ai/tree/master/.claude/skills/hooks-management

Ref

30c73eac2afe762f6aa9c4553158769369d47351

Maintenance freshness

7/20/2026

Usage

5 downloads · 166 views

File structure

📁 references/

📄 hooks.md

📄 input-patterns.md

📄 SKILL.md