, `credentials`, `\\.pem hookify-rules · Skills-SI Market \n\n### stop Events\nCompletion checks and reminders. Pattern `.*` matches always.\n\n### prompt Events\nMatch user prompt content for workflow enforcement.\n\n## Pattern Writing Tips\n\n### Regex Basics\n- Escape special chars: `.` to `\\.`, `(` to `\\(`\n- `\\s` whitespace, `\\d` digit, `\\w` word char\n- `+` one or more, `*` zero or more, `?` optional\n- `|` OR operator\n\n### Common Pitfalls\n- **Too broad**: `log` matches \"login\", \"dialog\" — use `console\\.log\\(`\n- **Too specific**: `rm -rf /tmp` — use `rm\\s+-rf`\n- **YAML escaping**: Use unquoted patterns; quoted strings need `\\\\s`\n\n### Testing\n```bash\npython3 -c \"import re; print(re.search(r'your_pattern', 'test text'))\"\n```\n\nAvoid nested quantifiers such as `(a+)+`. The runtime rejects patterns with\ncommon catastrophic-backtracking shapes because rules run synchronously in the\nhook path, and every regex evaluation has a 25 ms hard timeout. Invalid,\nsymlinked, or oversized local rules fail open and emit a\ndiagnostic without disabling other Hookify rules.\n\nGit-tracked local rules are disabled by default. Set\n`ECC_HOOKIFY_ALLOW_TRACKED=1` only after reviewing those files; ordinary\ngitignored rules created locally remain active without that override.\n\n## Runtime Behavior\n\n- `warn` injects the message as event-specific additional context and does not block.\n- `block` denies matching Bash, PowerShell, Write, Edit, or MultiEdit calls before execution.\n- On prompt, post-tool, and stop events, `block` uses Claude Code's structured block decision.\n- Stop rules skip recursive `stop_hook_active` events to prevent infinite continuation loops.\n\n## File Organization\n\n- **Location**: `.claude/` directory in project root\n- **Naming**: `.claude/hookify.{descriptive-name}.local.md`\n- **Gitignore**: Add `.claude/*.local.md` to `.gitignore`\n\n## Commands\n\n- `/hookify [description]` - Create new rules (auto-analyzes conversation if no args)\n- `/hookify-list` - View all rules in table format\n- `/hookify-configure` - Toggle rules on/off interactively\n- `/hookify-help` - Full documentation\n\n## Quick Reference\n\nMinimum viable rule:\n```markdown\n---\nname: my-rule\nenabled: true\nevent: bash\npattern: dangerous_command\n---\nWarning message here\n```\n","licenseDocuments":[]}}
Skills-SIMarket
skills-si.com
Proposer une Skill
/
L’interface est localisée ; les présentations et documents des Skills sont traduits automatiquement par IA dans votre langue. Le code, les commandes, chemins et termes techniques restent en version originale, et le document de l’auteur fait foi.
Explorer les Skills
Développement · SKILL.md

hookify-rules

hookify-rules

Create and configure hookify rules — markdown files with YAML frontmatter that match bash, file, prompt, or stop events by regex or conditions and show warn/block messages to the agent. Use when creating a hookify rule, writing hook rule syntax, configuring hookify, or adding pattern guardrails such as blocking dangerous commands, .env edits, or debug code.

Independent GitHub snapshot · Automated classification · Original documentation governs

Aaffaan-m / eccMIT

Documentation de la Skill

GitHub

name: hookify-rules description: Create and configure hookify rules — markdown files with YAML frontmatter that match bash, file, prompt, or stop events by regex or conditions and show warn/block messages to the agent. Use when creating a hookify rule, writing hook rule syntax, configuring hookify, or adding pattern guardrails such as blocking dangerous commands, .env edits, or debug code.

Writing Hookify Rules

Overview

ECC evaluates project-local Hookify rules with its built-in Node runtime. No separate Hookify plugin or Python installation is required when ECC hooks are enabled.

Hookify rules are markdown files with YAML frontmatter that define patterns to watch for and messages to show when those patterns match. Rules are stored in .claude/hookify.{rule-name}.local.md files.

Rule File Format

Basic Structure

---
name: rule-identifier
enabled: true
event: bash|file|stop|prompt|all
pattern: regex-pattern-here
---

Message to show Claude when this rule triggers.
Can include markdown formatting, warnings, suggestions, etc.

Frontmatter Fields

FieldRequiredValuesDescription
nameYeskebab-case stringUnique identifier (verb-first: warn-, block-, require-*)
enabledYestrue/falseToggle without deleting
eventYesbash/file/stop/prompt/allWhich hook event triggers this
actionNowarn/blockwarn (default) shows message; block prevents operation
patternYes*regex stringPattern to match (*or use conditions for complex rules)

Advanced Format (Multiple Conditions)

---
name: warn-env-api-keys
enabled: true
event: file
conditions:
  - field: file_path
    operator: regex_match
    pattern: \.env$
  - field: new_text
    operator: contains
    pattern: API_KEY
---

You're adding an API key to a .env file. Ensure this file is in .gitignore!

Condition fields by event:

  • bash: command
  • file: file_path, new_text, old_text, content
  • prompt: user_prompt

Operators: regex_match, contains, equals, not_contains, starts_with, ends_with

All conditions must match for rule to trigger.

Event Type Guide

bash Events

Match Bash command patterns:

  • Dangerous commands: rm\s+-rf, dd\s+if=, mkfs
  • Privilege escalation: sudo\s+, su\s+
  • Permission issues: chmod\s+777

file Events

Match Edit/Write/MultiEdit operations:

  • Debug code: console\.log\(, debugger
  • Security risks: eval\(, innerHTML\s*=
  • Sensitive files: \.env$, credentials, \.pem$

stop Events

Completion checks and reminders. Pattern .* matches always.

prompt Events

Match user prompt content for workflow enforcement.

Pattern Writing Tips

Regex Basics

  • Escape special chars: . to \., ( to \(
  • \s whitespace, \d digit, \w word char
  • + one or more, * zero or more, ? optional
  • | OR operator

Common Pitfalls

  • Too broad: log matches "login", "dialog" — use console\.log\(
  • Too specific: rm -rf /tmp — use rm\s+-rf
  • YAML escaping: Use unquoted patterns; quoted strings need \\s

Testing

python3 -c "import re; print(re.search(r'your_pattern', 'test text'))"

Avoid nested quantifiers such as (a+)+. The runtime rejects patterns with common catastrophic-backtracking shapes because rules run synchronously in the hook path, and every regex evaluation has a 25 ms hard timeout. Invalid, symlinked, or oversized local rules fail open and emit a diagnostic without disabling other Hookify rules.

Git-tracked local rules are disabled by default. Set ECC_HOOKIFY_ALLOW_TRACKED=1 only after reviewing those files; ordinary gitignored rules created locally remain active without that override.

Runtime Behavior

  • warn injects the message as event-specific additional context and does not block.
  • block denies matching Bash, PowerShell, Write, Edit, or MultiEdit calls before execution.
  • On prompt, post-tool, and stop events, block uses Claude Code's structured block decision.
  • Stop rules skip recursive stop_hook_active events to prevent infinite continuation loops.

File Organization

  • Location: .claude/ directory in project root
  • Naming: .claude/hookify.{descriptive-name}.local.md
  • Gitignore: Add .claude/*.local.md to .gitignore

Commands

  • /hookify [description] - Create new rules (auto-analyzes conversation if no args)
  • /hookify-list - View all rules in table format
  • /hookify-configure - Toggle rules on/off interactively
  • /hookify-help - Full documentation

Quick Reference

Minimum viable rule:

---
name: my-rule
enabled: true
event: bash
pattern: dangerous_command
---
Warning message here

More skills to explore

Voir toutes les Skills
Skills enregistrées