claude

instructions-audit

Prompt-injection tripwire for CLAUDE.md and .claude/rules files: flags invisible-Unicode smuggling, secret read/exfil directives, curl|sh, decode-and-execute, and hook/settings tampering as instructions load, then locks the session (every prompt and tool call denied) until a human clears it.

581 on GitHubby Karan Bansalv1.0.1MITupdated yesterdaysecurity
/

Plugin instructions-audit from marketplace claude-code-hooks in karanb192/claude-code-hooks. Commands read from the repo's manifest — yesterday.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Hooks (3)

  • InstructionsLoaded

    node "${CLAUDE_PLUGIN_ROOT}/instructions-audit.js"

  • UserPromptSubmit

    node "${CLAUDE_PLUGIN_ROOT}/instructions-audit.js"

  • PreToolUse

    node "${CLAUDE_PLUGIN_ROOT}/instructions-audit.js"

View source on GitHub hooks.karanbansal.in

More from karanb192/claude-code-hooks

All 22 plugins →

Prices your repo's TODO/FIXME/HACK debt as aging XP bounties, injects the top 3 as opportunistic side quests, and verifies + pays out bounties you genuinely clear.

1 skill · hooks

581

cache-tax

claude

The comeback price of a cold prompt cache, shown before you pay it: a UserPromptSubmit guard that warns (or refuses once) when your next message re-writes a lapsed 1-hour cache at up to 80x the read rate, a SessionStart hook that prices a stale resume, and a one-line status line segment with minutes left and the cold-comeback cost.

1 skill · hooks

581

Per-file context-cost leaderboard: attributes every tool result's tokens to the files it loaded, so you know which files cost you the most.

1 skill · hooks

581

Remembers approaches you tried and reverted (with reason and estimated token cost) and warns before you retry them, via a prompt-submit card and an ask-before-edit guard.

1 skill · hooks

581

CLAUDE.md compliance scorecard: tallies which rules Claude actually follows vs ignores as you edit, and flags chronically-ignored rules to promote into a deterministic hook.

1 skill · hooks

581

A personal flight recorder for Claude Code quality: records your own per-session failure rate, edit churn, and tokens/task by model version, and flags real shifts when a model changes.

1 skill · hooks

581

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Comprehensive toolkit for developing Claude Code plugins. Includes 7 expert skills covering hooks, MCP integration, commands, agents, and best practices. AI-assisted plugin creation and validation.

7 skills · 1 command · 3 agents

anthropics/claude-code 155,476

CMEM Pro

claude

CMEM Pro for the Claude app - hooks stream tool use to cmem.ai and inject observations into new sessions and agents

3 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

headroom

claude

Headroom startup hooks for Claude Code and GitHub Copilot CLI.

hooks

headroomlabs-ai/headroom 79,508

mempalace

claudecodex

AI memory system — mine projects and conversations into a searchable palace. 47 MCP tools, auto-save hooks, guided setup.

3 skills · 6 commands · 1 MCP server · hooks

MemPalace/mempalace 60,536

payload

claude

Payload Development plugin - covers collections, fields, hooks, access control, plugins, and database adapters.

1 skill

payloadcms/payload 45,796

Maintain instructions-audit?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins22 plugins