A rule-based PreToolUse hook for Claude Code and Codex CLI that denies dangerous Bash commands, asks for confirmation on risky ones, and audits every call — no AI/LLM required.
cli golang hooks sandboxing audit-log policy-engine devsecops security-tool guardrails llm-security claude-code codex-cli ai-agent-security pretooluse command-injection-prevention
-
Updated
Aug 11, 2026 - Go