brownfield

This script is a configuration generator rather than a direct malware payload. It meaningfully increases execution capability by defining multiple lifecycle hooks that will run bash scripts from a project-controlled hooks directory and by allowing broad package-manager command patterns based on PKG_MANAGER. The overall security risk hinges on the integrity and provenance of the referenced .claude/hooks/*.sh scripts and on whether PROJECT_DIR and CLAUDE_PROJECT_DIR are trustworthy at runtime.