env-file-protection

Prevent writing to .env files using the if condition for lightweight filtering. Blocks any Write tool call targeting .env* files, protecting secrets from accidental overwrites. Uses the if field to avoid spawning a process unless the file…

Automations
Security
57

What it does and how to use it

A hook that automates security actions at key moments (before/after a tool runs, on save, etc.), without you having to think about it.

Install the hook (command above).
It runs automatically on the defined events.
Adjust the rules in the settings file if you want to fine-tune it.

Install (Claude Code)

mkdir -p .claude/hooks && curl -fsSL https://doutorai.pt/data/lib/hooks__env-file-protection.md -o .claude/hooks/env-file-protection.json

Paste this command into the terminal, in your project folder, and the component installs automatically.

Content

{
  "description": "Prevent writing to .env files using the if condition for lightweight filtering. Blocks any Write tool call targeting .env* files, protecting secrets from accidental overwrites. Uses the if field to avoid spawning a process unless the file pattern matches.",
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Write",
        "hooks": [
          {
            "type": "command",
            "if": "Write(.env*)",
            "command": "echo '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"Writin

- 🔒 Full content on the Pro plan (€7.99/month) -

Need help with Claude Code?

Ask Dr AI - it explains things simply.

Need a tailor-made solution?

Not sure where to start with AI in your business? Get a free assessment and a tailored plan - no commitment.

Save hours every week with AI, no hassle

Doutor AI gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further.

See plans