fallow-review

This fragment is a declarative hook configuration that triggers execution of two local shell scripts from a hidden tool directory (.claude/hooks) when session lifecycle events occur or when feed.jsonl changes. The snippet shows no explicit malicious code, secrets, or network activity, but it creates a high-impact command-execution pathway whose safety depends entirely on the contents and integrity of the referenced .sh files and the security of ${CLAUDE_PROJECT_DIR} resolution. Review/verify those scripts and ensure they cannot be altered by unauthorized parties.