From block-no-verify
Set up PreToolUse hook to block --no-verify and other git bypass flags in Claude Code projects
How this command is triggered — by the user, by Claude, or both
Slash command
/block-no-verify:block-no-verify [--global] [--extend <additional-flags>]The summary Claude sees in its command listing — used to decide when to auto-load this command
# Block No-Verify Setup You are a security configuration expert. Set up a PreToolUse hook that prevents AI agents from using `--no-verify`, `--no-gpg-sign`, and other bypass flags that skip git hooks. ## Context AI agents can use bypass flags like `--no-verify` to skip pre-commit hooks, defeating linting, formatting, testing, and security checks. This command configures a PreToolUse hook to block those flags. ## Requirements $ARGUMENTS ## Instructions ### 1. Check Existing Configuration Look for an existing `.claude/settings.json` in the project root: ### 2. Determine Scope - If...
You are a security configuration expert. Set up a PreToolUse hook that prevents AI agents from using --no-verify, --no-gpg-sign, and other bypass flags that skip git hooks.
AI agents can use bypass flags like --no-verify to skip pre-commit hooks, defeating linting, formatting, testing, and security checks. This command configures a PreToolUse hook to block those flags.
$ARGUMENTS
Look for an existing .claude/settings.json in the project root:
cat .claude/settings.json 2>/dev/null || echo "No existing settings found"
--global flag is passed, target ~/.claude/settings.json.claude/settings.json in the project rootAdd or merge the following PreToolUse hook configuration:
{
"hooks": {
"PreToolUse": [
{
"matcher": "Bash",
"hook": {
"type": "command",
"command": "if printf '%s' \"$TOOL_INPUT\" | grep -qE '(^|&&|;|\\|)\\s*git\\s+.*--(no-verify|no-gpg-sign)'; then echo 'BLOCKED: --no-verify and --no-gpg-sign flags are not allowed. Run the commit without bypass flags so that pre-commit hooks execute properly.' >&2; exit 2; fi"
}
}
]
}
}
If a settings file already exists:
hooks.PreToolUse arrayIf --extend flag is passed with additional flags:
--extend "force,force-with-lease")After writing the configuration:
# Validate JSON syntax
python3 -c "import json; json.load(open('.claude/settings.json'))" 2>&1 || echo "Invalid JSON"
# Display the configured hooks
cat .claude/settings.json
Explain to the user how to verify:
The hook is now active. To test:
1. Try running: git commit --no-verify -m "test"
2. The hook should block this command with an error message
3. Running: git commit -m "test" should work normally
npx claudepluginhub yo-steven/agents-exploration-20260523 --plugin block-no-verify