fix(hooks): add bash-file-read-guard to warn agents against cat/head/tail (fixes #2096)

2026-03-23 20:15:20 +09:00
parent 331f7ec52b
commit 2f801f6c28
5 changed files with 54 additions and 0 deletions
@@ -45,6 +45,7 @@ export function createToolExecuteBeforeHandler(args: {
    await hooks.questionLabelTruncator?.["tool.execute.before"]?.(input, output)
    await hooks.claudeCodeHooks?.["tool.execute.before"]?.(input, output)
    await hooks.nonInteractiveEnv?.["tool.execute.before"]?.(input, output)
+    await hooks.bashFileReadGuard?.["tool.execute.before"]?.(input, output)
    await hooks.commentChecker?.["tool.execute.before"]?.(input, output)
    await hooks.directoryAgentsInjector?.["tool.execute.before"]?.(input, output)
    await hooks.directoryReadmeInjector?.["tool.execute.before"]?.(input, output)