Defined in hooks/hooks.json
{
"PostToolUse": [
{
"hooks": [
{
"type": "command",
"command": "uv run --directory ${CLAUDE_PLUGIN_ROOT} ${CLAUDE_PLUGIN_ROOT}/hooks/security/file_protection.py",
"timeout": 30,
"description": "Prevents modification of sensitive files (.env, keys, production configs)"
}
],
"matcher": "Edit|Write",
"description": "Security validation: Protects sensitive files from modification"
},
{
"hooks": [
{
"type": "command",
"command": "uv run --directory ${CLAUDE_PLUGIN_ROOT} ${CLAUDE_PLUGIN_ROOT}/hooks/quality/pre_commit_validate.py",
"timeout": 120,
"description": "Runs linting and tests before git commits"
}
],
"matcher": "Bash",
"description": "Quality validation: Pre-commit checks"
}
]
}{
"riskFlags": {
"touchesBash": true,
"matchAllTools": false,
"touchesFileWrites": true
},
"typeStats": {
"command": 2
},
"eventStats": {
"PostToolUse": 2
},
"originCounts": {
"absolutePaths": 0,
"pluginScripts": 2,
"projectScripts": 0
},
"timeoutStats": {
"commandsWithoutTimeout": 0
}
}