Auto-approve compound Bash commands in Claude Code — pipes, chains, subshells parsed and checked per-segment
-
Updated
Jul 29, 2026 - Shell
#
pretooluse
Here are 45 public repositories matching this topic...
The original 16 Claude Code safety hooks, kept for backward compatibility. The maintained set — 914 hooks, one-command install — is cc-safe-setup.
plugin bash open-source hooks npm security devops automation cookbook owasp developer-tools safety autonomous ai-safety claude anthropic claude-code database-protection pretooluse posttooluse
-
Updated
Aug 29, 2026 - Shell
Auto-permission engine for Antigravity CLI (agy): deterministic AST parser + LLM classifier
cli permissions sandboxing ai-agents guardrails security-gate prompt-injection llm-security agentic-ai antigravity coding-agent pretooluse agy zero-ambient-authority
-
Updated
Sep 21, 2026 - Python
Guard rails for Claude Code: workspace boundaries, protected branches, production targets, lost exit status, and foreground time.
git shell bash kubernetes hooks security terraform sandbox permissions developer-tools ai-agents guardrails llm anthropic agentic-ai claude-code claude-code-hooks claude-code-plugin claude-code-marketplace pretooluse
-
Updated
Nov 8, 2026 - Python
🐕 AI-Powered Risk Assessment for Claude Code — 7-layer pipeline, native notifications, menu bar dashboard. One line install.
notifications macos rust cli open-source hooks security cross-platform notifier developer-tools risk-assessment claude menu-bar ai-security ai-agent anthropic claude-code claude-code-hooks pretooluse claude-code-notifier
-
Updated
Apr 21, 2026 - Rust
Tool-call guardrails for Claude Code derived from cc-logger telemetry: nudge recoverable mistakes, block irreversible ones. The guard stage of callusguard; still works standalone.
hooks observability ai-agents guardrails runtime-controls llmops claude-code agent-safety agent-governance agent-harness pretooluse
-
Updated
Sep 29, 2026 - Python
Flexible and deterministic Claude Code PreToolUse handler
-
Updated
Nov 2, 2026 - Haskell
Claude Code-compatible command hooks for the OMP (Oh My Pi) coding agent
-
Updated
Jul 14, 2026 - TypeScript
Moved to karlkfi/claude-bouncer. Branch-aware git permissions for Claude Code — auto-approve safe git/gh commands, pause at main and destructive ops.
git bash productivity hooks security permissions developer-tools gh worktree guardrail claude-code claude-code-plugin pretooluse
-
Updated
Aug 27, 2026 - Shell
The primitives layer for every coding agent — one handler API over per-agent hooks, instruction files, plugin packaging, and config.
python hooks developer-tools cursor codex ai-agents windsurf github-copilot gemini-cli claude-code ai-coding-assistant agent-hooks llm-tooling ai-coding-assistants stdlib-only ai-coding-assistant-tools pretooluse agents-md-template capability-matrix plugin-packaging
-
Updated
Nov 2, 2026 - Python
A PreToolUse Bash tool hook that auto-approves read-only commands
-
Updated
Jul 15, 2026 - Go
Plugin for CLI agents — credential leak prevention via PreToolUse + PostToolUse hooks. Works with Droid, Devin, Claude Code, opencode, Grok, Cursor, and Codex.
plugin hooks security opencode secrets devin cursor droid grok ai-safety ai-agents credential-guard claude-code codex-cli cli-agents agent-plugin pretooluse
-
Updated
Oct 30, 2026 - Python
An environment-aware Claude Code PreToolUse hook for the Railway CLI. Resolves the target environment at call time - from -e or the per-directory link - so production deploys, volume deletes, and live DB shells hard-deny while read-only troubleshooting stays prompt-free. Fails closed.
-
Updated
Jun 25, 2026 - Shell
PreToolUse hook for Claude Code: blocks agent spending, account creation and fund moves, queues them for human approval, and proves it ran.
python hooks security ai permissions safety cost-control autonomous-agents human-in-the-loop guardrails approval-workflow llm llmops anthropic token-usage agent-tools ai-guardrails claude-code claude-code-hook pretooluse
-
Updated
Aug 27, 2026 - Python
Block irreversible AI-agent actions before they run — deterministic, fail-closed action veto for Claude Code, Codex, Cursor, and other tool-using agents.
python security mcp developer-tools cursor codex ai-safety devsecops ai-agents guardrails llm local-llm ollama llm-agents claude-code fail-closed agent-safety pretooluse agent-guardrail action-veto
-
Updated
Nov 8, 2026 - Python
Stops your AI coding agent from writing calls to functions that don't exist, before the edit lands. Deterministic, no LLM, no API keys.
go hooks mcp static-analysis developer-tools code-quality git-hooks codex ai-agents llm coding-agents ai-tooling mcp-server codebase-analysis claude-code hallucination-prevention anti-hallucination claude-code-plugin pretooluse symbol-checking
-
Updated
Nov 6, 2026 - Go
Explainable Bash permission hook and progressive allowlist builder for Claude Code
-
Updated
Sep 15, 2026 - Python
Road signs for coding agents: one measured fact at the moment of action, silence otherwise
python git developer-tools ai-agents git-worktree agentic coding-agents claude-code agent-observability agent-reliability context-engineering claude-code-hooks claude-code-plugin agent-harness context-integrity pretooluse zero-llm hermes-labs
-
Updated
Sep 29, 2026 - Python
한글 깨짐(Hangul corruption) 방지 훅 — LLM이 tool call 파라미터에 한글을 잘못 써서 「추천」이 「추첸」이 되는 문제를 저장 직전에 차단합니다. 인코딩·폰트 깨짐(mojibake)과 다른 문제. Claude Code · Cursor · Codex / Notion · Jira · Confluence
jira mcp korean cursor confluence hangul codex ai-agents korean-text-processing unicode-escape mojibake llm claude-code claude-code-hooks claude-code-plugin pretooluse hangul-corruption
-
Updated
Sep 11, 2026 - Python
A conservative Jev-backed auto-mode safety gate for Antigravity CLI tool calls
-
Updated
Sep 21, 2026 - JavaScript
Add this topic to your repo
To associate your repository with the pretooluse topic, visit your repo's landing page and select "manage topics."