shell-wrapper-guard

Detects destructive commands hidden inside shell wrappers (sh -c, bash -c, python3 -c, node -e, perl -e, ruby -e). Complements dangerous-command-blocker by catching bypass vectors like 'sh -c "rm -rf /"' that evade direct command checks.…

Automations
Security
61

What it does and how to use it

A hook that automates security actions at key moments (before/after a tool runs, on save, etc.), without you having to think about it.

Install the hook (command above).
It runs automatically on the defined events.
Adjust the rules in the settings file if you want to fine-tune it.

Install (Claude Code)

mkdir -p .claude/hooks && curl -fsSL https://doutorai.pt/data/lib/hooks__shell-wrapper-guard-2.md -o .claude/hooks/shell-wrapper-guard-2.json

Paste this command into the terminal, in your project folder, and the component installs automatically.

Content

{
  "description": "Detects destructive commands hidden inside shell wrappers (sh -c, bash -c, python3 -c, node -e, perl -e, ruby -e). Complements dangerous-command-blocker by catching bypass vectors like 'sh -c \"rm -rf /\"' that evade direct command checks. Covers 8 bypass patterns: interpreter one-liners, nested wrappers, pipe-to-shell, here-strings, and env-based wrappers.",
  "supportingFiles": [
    {
      "source": "shell-wrapper-guard.sh",
      "destination": ".claude/hooks/shell-wrapper-guard.sh",
      "executable": true
    }
  ],
  "hooks": {
    "PreToolUse": [
      {
        "

- 🔒 Full content on the Pro plan (€7.99/month) -

Need help with Claude Code?

Ask Dr AI - it explains things simply.

Need a tailor-made solution?

Not sure where to start with AI in your business? Get a free assessment and a tailored plan - no commitment.

Save hours every week with AI, no hassle

Doutor AI gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further.

See plans