codex-compat

No direct indicators of malware (e.g., exfiltration, reverse shells, destructive actions, or credential theft) are present in this snippet. The primary security risk is indirect: it sources a repository-local hook library and executes all repository-local `*-check.sh` hooks under `.claude/hooks/`, meaning the pipeline’s safety strongly depends on the integrity of those hook scripts. If an attacker can modify `.claude/hooks/`, they could achieve arbitrary code execution during the gating step; otherwise, the fragment functions as a typical quality/test gate orchestrator.