block-no-verify
PreToolUse hook that blocks --no-verify, --no-gpg-sign, and other flags that bypass git hooks.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for block-no-verify, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
A Claude Code plugin whose PreToolUse hook prevents AI agents from using bypass flags like --no-verify and --no-gpg-sign that skip git hooks and commit signing. It inspects the agent's proposed git commands and denies dangerous ones, sitting exactly on the command trust boundary — a pure guardrail plugin.
Key features and capabilities
- Blocks git hook-bypass flags
- PreToolUse command inspection
- Enforces signing and verification
Use cases
- Stop agents skipping git hooks
- Enforce commit signing