block-no-verify-hook
PreToolUse hook that blocks AI agents from bypassing git pre-commit hooks with --no-verify.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for block-no-verify-hook, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
An Agent Skill that configures a Claude Code PreToolUse hook to intercept and reject shell commands containing bypass flags like git commit --no-verify before they run, so agents cannot skip pre-commit hooks, GPG signing, or other safety gates. It ships the hook config and matching logic the agent installs into settings.
Key features and capabilities
- PreToolUse bypass-flag interception
- Enforces pre-commit and signing gates
- Blocks --no-verify and similar flags
Use cases
- Enforcing commit quality gates
- Preventing agents from skipping hooks