🧰 Claude Code hooks

The items that name it 2

• Before the first prompt: Code execution paths in trusted coding-agent projects
  writeup2026-08-03

  Lifecycle hooks, including SessionStart hooks installed by malicious npm packages (MAL-2026-3648).

• When the Guardrails Slip: The Case for Hook-Based Governance Across Agent Platforms | Blog | Endor Labs
  article2026-07-31

  Interception points (tool calls, file reads/writes, shell execution, pre/post-prompt) allowing third-party code to allow, deny, or rewrite agent actions

In every workspace you can read 3