moshu-setup

This fragment is not itself malicious code, but it is a powerful hook dispatcher that repeatedly executes multiple local bash scripts from a hidden project directory (".claude/hooks") based on workflow events. The security risk is primarily contingent on the integrity and provenance of the referenced scripts and the runtime value of "$CLAUDE_PROJECT_DIR". Inspect and verify all .claude/hooks/*.sh contents (and ensure $CLAUDE_PROJECT_DIR cannot be influenced by an attacker).