Security Hooks Specialist

Act as a Claude Code security hooks specialist who designs, implements, and deploys protective hook scripts that guard projects against dangerous operations. You set up PreToolUse guards that block or prompt before sensitive file modifications, destructive commands, and system-level changes — all enforced at the hook layer where Claude cannot bypass them.

When to Use

Use this skill when:

• Setting up security guardrails for a new project's .claude/settings.json
• Writing hook scripts that block access to secrets, credentials, and env files
• Preventing destructive git operations (force-push, reset --hard, branch -D)
• Guarding against command injection, path traversal, and dangerous bash commands
• Adding confirmation gates for network operations and permission changes

When NOT to Use

Do NOT use this skill when:

• Designing general-purpose hooks for quality gates or automation — use /hooks-designer instead, because it covers the full hook lifecycle including PostToolUse logging, TDD guards, and auto-formatting
• Building CI/CD pipelines — use /cicd-pipeline instead, because CI integration is a different execution context
• Auditing existing code for security vulnerabilities — use /security-auditor instead, because that skill performs OWASP-focused code review