claude-hooks: Lasso security integrations for Claude Code, including prompt-injection defenses

by lasso-security · Claude Skill · ★ 267

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install claude-hooks

git clone https://github.com/lasso-security/claude-hooks.git

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: CAUTION · quality 77/100

Flagged: hides a payload as hex. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

agentaiclaude-codeclaude-desktopcoding-agenthooksprompt-injectionprompt-injection-llm-security

Quick Facts

Stars267
Forks30
LanguageTypeScript
CategoryClaude Skill
LicenseMIT
Quality Score77/100
Open Issues3
Last Updated2026-01-08
Created2026-01-07
Platformsclaude-code, node
Est. Tokens~16k

About claude-hooks

Claude Hooks A collection of security and utility hooks for Claude Code. Hooks allow you to extend Claude Code's behavior by running custom scripts at key points during execution. Research Paper: For detailed analysis of indirect prompt injection vulnerabilities in Claude Code, see: The Hidden Backdoor in Claude Coding Assistant Available Hooks 🛡️ Prompt Injection Defender Defense against...

claude-hooks alternative? Top 6 similar tools

Looking for a claude-hooks alternative? If you're comparing claude-hooks with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • smart-ralph by tzachbon · ⭐ 544

    Spec-driven development with smart compaction. Claude Code plugin combining Ralph Wiggum loop with structured

  • daymon by daymonio · ⭐ 365

    Daymon puts your favorite AI to work 24/7. It schedules, remembers, and orchestrates your own virtual team. Fr

  • golembot by 0xranx · ⭐ 322

    Any Agent × Any Provider × Anywhere. Connect Cursor, Claude Code, OpenCode, or Codex to Slack, Telegram, Disco

  • ralph-starter by multivmlabs · ⭐ 97

    Bootstrap projects from Figma, Linear, Notion & GitHub specs. The only AI ralph with source integrations.

  • claude-emporium by Vvkmnn · ⭐ 82

    🏛 [UNDER CONSTRUCTION] A (roman) claude plugin marketplace

  • deepsafe-scan by XiaoYiWeio · ⭐ 75

    Universal preflight security scanner for AI coding agents — Detects hooks injection, credential exfiltration &

More Claude Skill Tools

Explore other popular claude skill tools:

View all Claude Skill tools →

Popular TypeScript Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Claude Skill tools