research-writing-assistant

This fragment is not inherently malicious; it is a hook configuration that enables automatic execution of a local script at session start. The primary risk is indirect: the security of the package depends entirely on the integrity and behavior of './hooks/session-start', which is not shown here. Review and integrity-verify that referenced script and its provenance as part of supply-chain security.