b-open-io/hook-manager
skills/hook-manager/SKILL.md
Discover and install automation hooks for Claude Code and Opencode. This skill should be used when users ask to "list hooks", "install a hook", "show available hooks", "enable hook", "what hooks are available", or need help managing agent automation hooks.
$ install --global
skillsauthnpx skillsauth add b-open-io/prompts hook-managerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 30, 2026, 2:43 AM134.6s1 file scanned
SKILL.md
- name:
- hook-manager
- version:
- 1.0.1
- description:
- Discover and install automation hooks for Claude Code and Opencode. This skill should be used when users ask to "list hooks", "install a hook", "show available hooks", "enable hook", "what hooks are available", or need help managing agent automation hooks.
- disable-model-invocation:
- true
Hook Manager
Help users discover, install, and diagnose automation hooks from the bopen-tools collection.
Available Hooks
| Hook | Event | Description | Recommendation |
|------|-------|-------------|----------------|
| protect-env-files | PreToolUse | Blocks edits to .env files (security) | Recommended |
| uncommitted-reminder | Stop | Shows uncommitted changes when agent stops | Optional |
| auto-git-add | PostToolUse | Auto-stages files after edits | Optional |
| time-dir-context | UserPromptSubmit | Adds timestamp/dir/branch to prompts | Optional |
| lint-on-save | PostToolUse | Runs lint:fix after file edits | Optional |
| lint-on-start | SessionStart | Runs linting on session start | Optional |
| auto-test-on-save | PostToolUse | Runs tests after file edits | Optional |
| protect-shadcn-components | PreToolUse | Protects shadcn UI components | Optional |
Hook Source Paths
Hooks live in the plugin cache. The exact version path segment varies; use a glob to locate them:
# Claude Code
ls ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/
# Opencode
ls ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/
Installing a Hook for the User
To install a hook, copy its JSON file to the correct hooks directory and inform the user to restart their agent.
Claude Code:
mkdir -p ~/.claude/hooks
cp ~/.claude/plugins/cache/bopen-tools/user/.claude/hooks/<hook-name>.json ~/.claude/hooks/
Opencode:
mkdir -p ~/.opencode/hooks
cp ~/.opencode/plugins/cache/bopen-tools/user/.claude/hooks/<hook-name>.json ~/.opencode/hooks/
After copying, tell the user: restart Claude Code (or Opencode) for the hook to take effect.
Checking Which Hooks Are Installed
# Claude Code
ls ~/.claude/hooks/
# Opencode
ls ~/.opencode/hooks/
Recommending Hooks
When a user asks what hooks to install without specifying a use case:
- Always recommend
protect-env-filesfirst — it is a security safeguard with no downsides. - Ask about their workflow to recommend optional hooks:
- Git-heavy work:
auto-git-add,uncommitted-reminder - Linting setup with
bun lint:fix:lint-on-save,lint-on-start - shadcn/ui projects:
protect-shadcn-components - Wants richer context in every prompt:
time-dir-context
- Git-heavy work:
Hook Details for Diagnosis
protect-env-files
Blocks Write/Edit on .env* files. No performance cost. Recommended universally.
uncommitted-reminder
Runs on Stop event; exits with code 2 if uncommitted changes exist, feeding the message back to the agent.
auto-git-add
Runs git add -A after Write/Edit/MultiEdit. Stages only; never commits. 5s timeout.
time-dir-context
Injects Context: <timestamp> | <cwd> | Branch: <branch> into every UserPromptSubmit.
lint-on-save / lint-on-start
Runs bun lint:fix. Requires lint:fix in package.json and bun + jq on PATH.
auto-test-on-save
Runs tests after file edits. Can be slow on large suites — confirm user wants this before installing.
protect-shadcn-components
Blocks edits to shadcn/ui component files. Only relevant when project uses shadcn/ui.
Additional Resources
See the hook catalog above for all available hooks and their configurations.
Related Skills
b-open-io/html-to-pdf
development
VerifiedTrustedCommunity
This skill should be used when the user asks to "design a business card", "make a printable PDF", "render HTML to PDF", "generate a postcard", "build print collateral", "set up an HTML print pipeline", or needs help with bleed, safe areas, font embedding, or QR generation for print. Provides a Playwright-based pipeline with multiple bundled templates and theme variants for business cards (minimal, watercolor light, watercolor dark) and instructions for adding new templates.
12SKILL.mdUpdated May 29, 2026
b-open-io/x-user-timeline
tools
VerifiedTrustedCommunity
Get recent tweets from an X/Twitter user. Use when user asks "what has @username posted", "recent tweets from", "user's X posts", "show timeline for", "what is @user saying". Requires X_BEARER_TOKEN.
12SKILL.mdUpdated Apr 3, 2026
b-open-io/x-user-lookup
data-ai
VerifiedTrustedCommunity
Get X/Twitter user profile by username. Use when user asks "who is @username", "get X profile", "lookup Twitter user", "find X account", "user details", "follower count for". Requires X_BEARER_TOKEN.
12SKILL.mdUpdated Apr 3, 2026
b-open-io/x-tweet-search
data-ai
VerifiedTrustedCommunity
Search recent X/Twitter posts by query. Returns RAW TWEETS (last 7 days). Use when user asks "search X for", "find tweets about", "what are people saying about", "Twitter search", "raw tweets about". For AI summaries/sentiment, use x-research instead. Requires X_BEARER_TOKEN.
12SKILL.mdUpdated Apr 3, 2026