claude

wormhook

Blocks npm/PyPI supply-chain malware and agent-hijack persistence at the Claude Code hook before it runs.

2 on GitHubby NoTambourine LLCv0.40.0MITupdated today
/

Plugin wormhook from marketplace notambourine in notambourine/agent-plugins. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • update

    Verify primary advisories and add local detection for supply-chain campaigns. Use for signature updates, new worm coverage, and campaign reviews.

Slash commands (1)

  • /wormhook:wormhook-setup

    Interactively set up wormhook's out-of-Claude scanning (CLI, git-pull audit, hourly sweep, scan roots)

Hooks (13)

  • PreToolUse

    "${CLAUDE_PLUGIN_ROOT}/scripts/wormhook.sh"

  • PostToolUse

    "${CLAUDE_PLUGIN_ROOT}/scripts/wormhook.sh"

  • UserPromptSubmit

    "${CLAUDE_PLUGIN_ROOT}/scripts/wormhook.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/wormhook.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/deps.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/integrity.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/sigage.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/firewall.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/coverage.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/cicd.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/drift.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/exposure.sh"

  • SessionStart

    "${CLAUDE_PLUGIN_ROOT}/scripts/doctor/shellguard.sh"

View source on GitHub

More from notambourine/agent-plugins

All 8 plugins →

nt-dev

claudecodex

Commits, pull requests, issues, end-of-day notes, session recall, and repo cleanup in NoTambourine conventions. Drafts only; hooks point PR and issue writes at their skills and block Unicode dashes in commits.

8 skills · hooks

2

nt-pm

claudecodex

Drafts client call agendas and follow-ups, deploy notes, and weekly recaps in plain English, and shares files through Drive. Posts only where a client context opts in and never deploys. Client facts live outside this repo.

7 skills

2

nt-vendor

claude

Third-party skills mirrored from their upstream repositories. The nt-vendor prefix marks work that is not ours.

5 skills

2

nt-seo-spider

claude

Screaming Frog SEO Spider MCP plus a crawl skill that sizes each run to its task. Requires SEO Spider 24+ with MCP running; disabled by default because it provides 29 tools.

1 skill · 1 MCP server

2

nt-brand

claudecodex

NoTambourine's brand kit: tokens, components, fonts, logos, deck and document export, voice, and doctrine. Copy audits use nt-voice.

1 skill

2

nt-shopify

claude

Refuses Shopify CLI and Shopify MCP calls that write to a live storefront. Development themes are the only writable surface, Hydrogen and app deploys are refused, and unknown verbs fail closed.

hooks

2

Maintain wormhook?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins8 plugins