hooks-manager
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages hooks that process potentially untrusted data from tool inputs and user prompts.\n
- Ingestion points: Event schemas in
references/input-output-schemas.mdincludetool_inputandprompt.\n - Boundary markers:
SKILL.mdrecommends usingjqfor validation and keeping blocking rules selective to avoid accidental interruption of work.\n - Capability inventory: Handlers described in
references/claude-code.md,references/codex.md, andreferences/cursor.mdallow execution of shell commands and prompt-based reasoning in response to agent events.\n - Sanitization: The skill recommends using trusted absolute paths (e.g.,
$CLAUDE_PROJECT_DIR) and setting execution timeouts for external commands.\n- [DYNAMIC_EXECUTION]: The skill is primarily designed to configure and manage lifecycle hooks, which are commands or prompts executed dynamically by the agent platform at runtime based on defined matchers and events.\n- [COMMAND_EXECUTION]: The skill provides examples of hooks that run shell commands likejqandprettierfor logging tool usage and formatting code.\n- [SAFE]: External documentation links inreferences/research-sources.mdtarget official domains and repositories for Claude Code, OpenAI Codex, and Cursor, includingcode.claude.com,github.com/openai, andcursor.com.
Audit Metadata