Hook
Security Scan Hook
Scan for secrets, vulnerabilities, and security issues before committing.
Install
Add to .claude/hooks/pre-commit-security.sh
About
Automatically scan code changes for security issues before they're committed. Detects hardcoded secrets (API keys, tokens, passwords), known vulnerability patterns, and insecure coding practices. Uses tools like gitleaks and semgrep under the hood. Prevents the most common security mistakes from entering your codebase.
Tags
securitysecretsscanningpre-commitvulnerability
Score Breakdown
CLI Score Breakdown8/11
✓Official SDK on npm/pip+2
✓Env var authentication (no browser OAuth)+2
✓Works in headless/CI environments+2
✗CLI tool available0
✓JSON response for piping/parsing+1
✓Docs have curl/CLI examples+1
✗Reasonable rate limits for scripted use0
✗Machine-readable pricing (md/JSON/static)0
Quality Score Breakdown
npm weekly downloads0
GitHub stars30k
Days since last release12d
Issue close ratio83%
TypeScript typesYes
Docs qualitygood
Breaking changesrare
Scores
CLI
8
Quality
8
Related
HookVerified
0/wkPre-commit Lint Hook
Automatically lint and fix code before every commit.
CLI
9
Quality
8
Add to .claude/hooks/pre-commit.shHookVerified
0/wkTest on Change Hook
Automatically run relevant tests when source files change.
CLI
9
Quality
8
Add to .claude/hooks/post-edit.shHook
0/wkNotification Hook
Send Slack or desktop notifications when long-running tasks complete.
CLI
7
Quality
7
Add to .claude/hooks/post-task.sh