hook-development
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill contains multiple utility shell scripts (
scripts/hook-linter.sh,scripts/test-hook.sh,scripts/validate-hook-schema.sh) intended for local development. These scripts perform deterministic checks on project files and configuration to ensure hook quality and safety. - [EXTERNAL_DOWNLOADS]: The documentation in
references/advanced.mdincludes examples of usingcurland other networking tools to integrate hooks with external services like Slack or monitoring systems. These are provided as educational implementation patterns and do not include malicious destinations or pre-configured exfiltration routes. - [INDIRECT_PROMPT_INJECTION]: The skill focuses on handling untrusted data from tool inputs and user prompts. It includes explicit security guidance and example scripts (
examples/validate-write.sh,examples/validate-bash.sh) that demonstrate how to sanitize inputs and block dangerous operations like path traversal or destructive system commands.
Audit Metadata