hook-authoring

84 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By athola/claude-night-market (GitHub) · coding · 350 stars · scanned at commit 4f94139

Guide creating Claude Code hooks with security-first design. Use for validation and enforcement.

Works with any agent that supports SKILL.md skills.

What this skill can do

Changes files outside its own folder

The author does not mention this.

Found in 6 places.

plugins/abstract/skills/hook-authoring/SKILL.md, line 70"command": "echo \"$(date): Executed $(jq -r '.tool_name')\" >> ~/.claude/audit.log"
plugins/abstract/skills/hook-authoring/modules/scope-selection.md, line 293"command": "echo \"$(date): $(jq -r '.tool_name')\" >> ~/.claude/audit.log"
plugins/abstract/skills/hook-authoring/modules/scope-selection.md, line 317"command": "echo \"$(date '+%Y-%m-%d %H:%M:%S') - $(jq -r '.tool_name')\" >> ~/.claude/audit.log"

Show 3 more

plugins/abstract/skills/hook-authoring/modules/scope-selection.md, line 458"command": "payload=$(cat); name=$(echo \"$payload\" | jq -r '.tool_name'); input=$(echo \"$payload\" | jq -c '.tool_input'); echo \"$name: $input\" >> ~/.claud
plugins/abstract/skills/hook-authoring/modules/scope-selection.md, line 505cp plugins/my-plugin/hooks/hooks.json .claude/hooks/
plugins/abstract/skills/hook-authoring/modules/scope-selection.md, line 517cat .claude/settings.json | jq '.hooks' >> ~/.claude/settings.json

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a coding skill.

Found in 9 places.

plugins/abstract/skills/hook-authoring/SKILL.md, line 158HOOK_INPUT=$(cat)
plugins/abstract/skills/hook-authoring/SKILL.md, line 371command=$(echo "$1" | jq -r '.tool_input.command // empty')
plugins/abstract/skills/hook-authoring/SKILL.md, line 397export FORCE_AUTOUPDATE_PLUGINS=1

Show 6 more

plugins/abstract/hooks/hooks.json, line 9"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/pre_skill_execution.py\"",
plugins/abstract/hooks/hooks.json, line 19"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/agent_dispatch_guard.py\"",
plugins/abstract/hooks/hooks.json, line 31"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/skill_execution_logger.py\"",
plugins/abstract/hooks/hooks.json, line 36"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/homeostatic_monitor.py\"",
plugins/abstract/hooks/hooks.json, line 48"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/aggregate_learnings_daily.py\"",
plugins/abstract/hooks/hooks.json, line 60"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/post_learnings_stop.py\"",

Sends data to these websites: api.example.com

This is disclosed by the author in the skill's SKILL.md or README.

Found in 7 places.

plugins/abstract/skills/hook-authoring/modules/common-patterns.md, line 61"""PreToolUse hook that injects context before WebFetch."""
plugins/abstract/skills/hook-authoring/modules/common-patterns.md, line 71if tool_name == "WebFetch":
plugins/abstract/skills/hook-authoring/modules/hook-types.md, line 220Failed `Read`, `WebFetch`, or `Glob` no longer cancels

Show 4 more

plugins/abstract/skills/hook-authoring/modules/performance-guidelines.md, line 115async with aiohttp.ClientSession() as session:
plugins/abstract/skills/hook-authoring/modules/performance-guidelines.md, line 604config = requests.get("http://api.example.com/config").json()
plugins/abstract/skills/hook-authoring/modules/performance-guidelines.md, line 609async with aiohttp.ClientSession() as session:
plugins/abstract/commands/create-hook.md, line 213- `"WebFetch|WebSearch"` - Match web tools

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'hook-authoring' ] || [ -L ~/.agents/skills/'hook-authoring' ]; then echo 'A skill folder named hook-authoring already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/athola/claude-night-market' "$d" && git -C "$d" checkout --quiet '4f94139a2d325f14442a62dc0b4cd28b41dbb5ba' -- 'plugins/abstract/skills/hook-authoring' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/abstract/skills/hook-authoring' ~/.agents/skills/'hook-authoring' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'hook-authoring' ~/.claude/skills/'hook-authoring' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for athola/claude-night-market shows the score of its lowest-scoring skill.

SkillTrust badge for athola/claude-night-market

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/athola/claude-night-market.svg)](https://zalavijaysinh.github.io/skilltrust/repos/athola/claude-night-market/)

Score history

Date	Version	Score
2026-11-07	`4f94139`	100