Hook Script Library Six production-ready hook scripts with security hardening. Copy to and register in . Security Principles Applied All scripts follow these rules: - at the top - for JSON (never string concatenation) - for path validation (prevents traversal) - for atomic file writes (prevents interleaved concurrent writes) - Reject filenames starting with (flag injection prevention) - Hardcoded blocklists only (never source from external files) - for untrusted data, not --- 1. security-guard.sh Registered on: with matcher Blocks hardcoded dangerous commands before Claude executes them. This…