Security
Hook
Hooks
What repo-forensics runs automatically, and when. A hook is a command Claude Code fires at a fixed moment, without you asking for it.
Install
$ npx -y skills add alexgreensh/repo-forensics --agent claude-codeShips with repo-forensics. Installing the plugin gets these hooks.
What fires, and when
PreToolUse
- Runs run_pre_scan.sh".
PostToolUse
- Runs run_auto_scan.sh".
SessionStart
Fires once when a session begins, and again after a context compaction. It is where a plugin sets up its environment, or restores state the compaction dropped.
- Runs run_session_scan.sh".
Where it lives
- hooks/ensure_refresh_daemon.shGitHub
- hooks/first-run-nudge.shGitHub
- hooks/install_refresh_daemon.shGitHub
- hooks/python-launcher.shGitHub
- hooks/run_auto_scan.shGitHub
- hooks/run_pre_scan.shGitHub
- hooks/run_session_scan.shGitHub
- hooks/uninstall_refresh_daemon.shGitHub
Showing the source of 6 of 8 scripts. Every one is linked above.
Read the script before you install anything that runs on your machine. This is the one part of a plugin that acts without being asked.
Ships withrepo-forensics
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.
Get the whole plugin, auto-invoked