Skill
Security
Skill
/session-hardening
Production hardening for agent sessions. Includes pretool guards (blocks rm -rf, co-author injection, publishing without approval, data exfiltration), continuous QA (runs tests every N file writes), and session context injection (git state, focus brief, handoff artifacts).
Install
$ npx -y skills add 0xNyk/lacp --skill session-hardening --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/session-hardening
Context preview
The summary Claude sees to decide when to auto-load this skill.
Production hardening for agent sessions. Includes pretool guards (blocks rm -rf, co-author injection, publishing without approval, data exfiltration), continuous QA (runs tests every N file writes), and session context injection (git state, focus brief, handoff artifacts).
SKILL.md
session-hardening.SKILL.mdname: session-hardening
description: "Production hardening for agent sessions. Includes pretool guards (blocks rm -rf, co-author injection, publishing without approval, data exfiltration), continuous QA (runs tests every N file writes), and session context injection (git state, focus brief, handoff artifacts). Activates automatically via hooks."
Session Hardening
This plugin provides three layers of production hardening:
Pretool Guard (PreToolUse)
Blocks dangerous operations before they execute:
- `rm -rf` → suggests `trash` instead
- Co-author injection in commits
- `npm/cargo/pip publish` without approval
- `curl | python/node` download-first patterns
- `chmod 777` → suggests specific masks
- `git reset --hard`, `git clean -f`
- Data exfiltration via `curl --data @.env`
- Push to main on public repos
Continuous QA (PostToolUse)
Runs your project's test command at configurable intervals during work:
- Detects test command from package.json, Makefile, Cargo.toml, pyproject.toml
- Fires every N file writes (default: 10)
- Injects failure feedback without blocking
- Includes thinking prompt on failure (think mode)
Session Context (SessionStart)
Injects at every session start:
- Git branch, recent commits, modified files
- Focus brief (current problem, beliefs, decisions)
- Handoff artifact from previous session
- System health score
- Self-Memory System context
Configuration
| Env Var | Default | Purpose | |---------|---------|---------| | `LACP_EVAL_CHECKPOINT_ENABLED` | `0` | Enable continuous QA | | `LACP_EVAL_CHECKPOINT_INTERVAL` | `10` | Test every N writes | | `LACP_CONTEXT_MODE` | `` | Active mode (tdd, debugging, sprint, etc.) |
Read more
name: session-hardening description: "Production hardening for agent sessions. Includes pretool guards (blocks rm -rf, co-author injection, publishing without approval, data exfiltration), continuous QA (runs tests every N file writes), and session context injection (git state, focus brief, handoff artifacts). Activates automatically via hooks."
Session Hardening
This plugin provides three layers of production hardening:
Pretool Guard (PreToolUse)
Blocks dangerous operations before they execute:
- `rm -rf` → suggests `trash` instead
- Co-author injection in commits
- `npm/cargo/pip publish` without approval
- `curl | python/node` download-first patterns
- `chmod 777` → suggests specific masks
- `git reset --hard`, `git clean -f`
- Data exfiltration via `curl --data @.env`
- Push to main on public repos
Continuous QA (PostToolUse)
Runs your project's test command at configurable intervals during work:
- Detects test command from package.json, Makefile, Cargo.toml, pyproject.toml
- Fires every N file writes (default: 10)
- Injects failure feedback without blocking
- Includes thinking prompt on failure (think mode)
Session Context (SessionStart)
Injects at every session start:
- Git branch, recent commits, modified files
- Focus brief (current problem, beliefs, decisions)
- Handoff artifact from previous session
- System health score
- Self-Memory System context
Configuration
| Env Var | Default | Purpose | |---------|---------|---------| | `LACP_EVAL_CHECKPOINT_ENABLED` | `0` | Enable continuous QA | | `LACP_EVAL_CHECKPOINT_INTERVAL` | `10` | Test every N writes | | `LACP_CONTEXT_MODE` | `` | Active mode (tdd, debugging, sprint, etc.) |
Ships withlacp
Local policy, evidence, and recovery controls for coding agents. LACP wraps Claude, Codex, Hermes, and other CLI agents with deterministic routing, approval gates, execution records, memory controls, and rollback paths.
Get the whole plugin
Stats
304
Stars
1
Forks
Active
Maintenance
Shell
Language
MIT
License
24d ago
Last commit
6mo ago
Created
Repo: 0xNyk/lacp