mathiasandClaude Opus 5.5 4a82206393 fix(hooks): close the five escapes the skills#52 review found ...

- Fail-closed path no longer needs jq: the ask JSON is a printf literal,
  and a host without jq asks instead of staying silent.
- A tool_name that is not a non-empty string asks (was: no opinion).
- Gate workflow_run_trigger, tag_create, release_create, and
  file_write_branch when it lands on main/master, has no branch, or
  empties a file (same effect as pr_merge / file_delete).
- Header claim narrowed: gitea-mcp spellings on any server name, not
  other servers' spellings of the same operation.
- Tests run the hook as hooks.json does (bash <path>), assert exit 0 on
  every case, and cover null/missing/wrong-type tool_name, last-segment
  verb parsing and a PATH without jq. 13 new cases were red first.

Refs mathias/infra#508

Bump-Type: minor

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-01 20:45:19 +02:00

..

hooks.json

feat(hooks): mcp-destructive-guard asks before irreversible MCP verbs

2026-10-01 20:37:46 +02:00

mcp-destructive-guard.sh

fix(hooks): close the five escapes the skills#52 review found

2026-10-01 20:45:19 +02:00

pre-task-ritual.sh

feat(plugin): ship the secret-guard and pre-task-ritual hooks + MCP servers

2026-08-23 14:31:04 +02:00

secret-guard.sh

fix(secret-guard): treat env as a dump only when no command follows

2026-08-29 09:50:08 +02:00