Which GitHub issue each hook answers (Appendix A)
Many of the guards in this collection exist because somebody filed a bug. 354 of the 916 scripts name at least one issue number in their header, covering 488 distinct issues. The table below inverts that: given a number, which scripts cite it.
This is a citation index, not a summary. The number is what the script’s own author wrote down; the text of each issue lives at github.com/anthropics/claude-code/issues and is not reproduced or paraphrased here, because a paraphrase of an issue nobody re-read is how a book starts being wrong. Use it in one direction: you have hit something, you find the issue, you want to know whether anyone already wrote a hook for it.
| Issue | Hooks that cite it |
|---|---|
| #1117 | git-operations-require-approval |
| #1501 | test-exit-code-verify |
| #1669 |
cwd-drift-detector, cwd-reminder
|
| #2142 | staged-secret-scan |
| #3471 | edit-error-counter |
| #3473 | virtual-cwd-helper |
| #6235 |
agents-md-edit-drift-warner, agents-md-loader
|
| #6354 | reinject-claudemd |
| #6850 | always-allow-pattern-suggester |
| #8856 | tmp-cleanup |
| #11005 | git-index-lock-cleanup |
| #11155 | unbounded-output-guard |
| #11380 | always-allow-pattern-suggester |
| #11932 | multiline-command-approver |
| #12619 | plan-repo-sync |
| #13371 | compound-command-deny-enforcer |
| #13585 | cache-creation-drift-detector |
| #16157 |
cache-creation-drift-detector, quota-anomaly-detector, session-rate-monitor, session-start-quota-status
|
| #16561 |
compound-command-allow, compound-command-approver
|
| #16704 | claudeignore-enforce-guard |
| #16856 | cache-creation-drift-detector |
| #17292 | compact-dispatch-watchdog |
| #17720 | temp-file-cleanup-stop |
| #18435 |
account-billing-log, account-routing-preflight
|
| #18740 | auto-mode-safety-enforcer |
| #19673 |
cache-creation-drift-detector, quota-anomaly-detector, session-rate-monitor
|
| #20085 | compound-command-deny-enforcer |
| #20412 | mcp-server-allowlist |
| #21151 | tool-file-logger |
| #22264 | edit-old-string-validator |
| #23706 |
cache-creation-drift-detector, session-quota-tracker
|
| #23913 | bulk-file-delete-guard |
| #24055 | output-token-env-check |
| #24179 | compact-circuit-breaker |
| #24185 | env-inline-secret-guard |
| #24775 | session-resume-env-fix |
| #24964 | symlink-guard |
| #27063 |
db-connect-guard, terraform-guard
|
| #27302 |
account-billing-log, account-routing-preflight
|
| #27398 | cowork-hook-absence-warner |
| #27474 | worktree-hooks-path-fix |
| #27957 | quoted-flag-approver |
| #28240 |
compound-bash-permission-resolver, compound-command-allow
|
| #28546 | git-index-lock-cleanup |
| #28784 | compound-command-deny-enforcer |
| #28993 | bash-safety-auto-deny |
| #29048 | sandbox-denywrite-enforcer |
| #29058 | mcp-orphan-process-guard |
| #29121 | issue-draft-redact-guard |
| #29187 | always-allow-pattern-suggester |
| #29214 | bypass-mode-effective-verifier |
| #29225 | public-repo-push-guard |
| #29249 | powershell-remove-item-guard |
| #29491 | compound-command-deny-enforcer |
| #29579 |
cache-creation-drift-detector, quota-anomaly-detector, session-rate-monitor, session-start-quota-status
|
| #29910 | write-secret-guard |
| #30435 |
auto-mode-safe-commands, bash-heuristic-approver
|
| #30505 | plain-language-danger-warn |
| #30519 |
always-allow-pattern-suggester, compound-bash-permission-resolver, compound-command-allow, compound-command-approver, deny-rule-integrity-verifier, permission-audit-log
|
| #30731 | dotenv-read-guard |
| #31005 | agents-md-edit-drift-warner |
| #31858 | unbounded-output-guard |
| #31946 | consecutive-failure-circuit-breaker |
| #32376 | hook-tamper-guard |
| #32402 | dispatch-allowlist-preflight |
| #32938 | file-edit-backup |
| #32985 |
auto-approve-git-read, compound-bash-permission-resolver
|
| #33183 | db-connect-guard |
| #33391 | protect-dotfiles |
| #33681 | sandbox-denywrite-enforcer |
| #33850 | uncommitted-work-shield |
| #34235 | agents-md-edit-drift-warner |
| #34327 |
session-start-safety-check, uncommitted-work-shield
|
| #34597 | write-overwrite-confirm |
| #34674 |
auto-checkpoint, deploy-guard, pre-compact-checkpoint
|
| #34729 | block-database-wipe |
| #34819 | credential-file-cat-guard |
| #35183 | heredoc-backtick-approver |
| #35357 | context-warning-verifier |
| #35435 | migration-verify-guard |
| #35576 | edit-retry-loop-guard |
| #35682 | concurrent-edit-lock |
| #35954 | deny-rule-integrity-verifier |
| #36151 |
account-billing-log, account-routing-preflight
|
| #36168 |
bypass-mode-effective-verifier, edit-always-allow
|
| #36182 | worktree-path-validator |
| #36183 | db-connect-guard |
| #36192 |
bypass-mode-effective-verifier, edit-always-allow
|
| #36233 | scope-guard |
| #36339 |
file-edit-backup, git-stash-before-danger, scope-guard, symlink-guard, windows-path-guard
|
| #36413 | banned-command-guard |
| #36673 | push-requires-test-pass |
| #36727 | subagent-tool-call-limiter |
| #36873 | auto-approve-ssh |
| #36885 | notify-waiting |
| #36900 | auto-approve-git-read |
| #36920 | enforce-tests |
| #36970 |
test-before-push, verify-before-commit
|
| #37150 |
git-checkout-safety-guard, uncommitted-work-shield
|
| #37153 | permission-audit-log |
| #37201 | git-config-guard |
| #37210 | edit-guard |
| #37314 | deploy-guard |
| #37331 | git-stash-before-danger |
| #37386 | auto-snapshot |
| #37405 | block-database-wipe |
| #37420 | network-guard |
| #37439 | block-database-wipe |
| #37457 | auto-snapshot |
| #37471 | allowlist |
| #37478 |
file-edit-backup, protect-dotfiles
|
| #37574 | block-database-wipe |
| #37595 | export-overwrite-guard |
| #37621 | compound-command-deny-enforcer |
| #37818 |
closure-word-verify-gate, evidence-claim-gate, verify-before-commit
|
| #37845 | credential-exfil-guard |
| #37866 | session-checkpoint |
| #37875 | case-sensitive-guard |
| #37888 | uncommitted-discard-guard |
| #37917 | long-session-reminder |
| #38029 |
output-explosion-detector, resume-context-guard, token-spike-alert
|
| #38239 | output-explosion-detector |
| #38255 | plan-mode-edit-guard |
| #38287 | worktree-unmerged-guard |
| #38335 |
cache-creation-drift-detector, long-session-reminder, quota-anomaly-detector, session-quota-tracker, session-rate-monitor, session-start-quota-status
|
| #38537 |
auto-mode-safe-commands, classifier-fallback-allow
|
| #38538 | git-crypt-worktree-guard |
| #38607 | rm-safety-net |
| #38618 | classifier-fallback-allow |
| #38651 | headless-stop-guard |
| #38765 | unicode-corruption-check |
| #38859 | dispatch-allowlist-preflight |
| #39038 | bg-task-cooldown-guard |
| #39057 | permission-mode-drift-guard |
| #39137 | plugin-process-cleanup |
| #39259 | classifier-fallback-allow |
| #39394 |
git-checkout-uncommitted-guard, session-start-safety-check
|
| #39421 | npm-supply-chain-guard |
| #39459 | polyglot-rm-guard |
| #39465 | usage-cache-local |
| #39523 | bypass-mode-effective-verifier |
| #39686 | skill-injection-detector |
| #39713 | plan-mode-enforcer |
| #39743 | api-overload-backoff |
| #39745 | api-overload-backoff |
| #39747 | api-overload-backoff |
| #39763 | api-overload-backoff |
| #39767 | api-overload-backoff |
| #39882 |
bash-secret-output-detector, secret-file-read-guard
|
| #39909 | tmp-output-size-guard |
| #39920 | worktree-memory-guard |
| #39945 | no-output-truncation |
| #39949 | file-recycle-bin |
| #39979 | prefer-dedicated-tools |
| #39987 | path-deny-bash-guard |
| #40010 | session-end-logger |
| #40117 | no-verify-blocker |
| #40156 | denied-action-retry-guard |
| #40213 | bash-domain-allowlist |
| #40256 | context-threshold-alert |
| #40262 | hook-stdout-sanitizer |
| #40284 | absolute-rule-enforcer |
| #40289 | check-before-act-enforcer |
| #40319 | session-resume-guard |
| #40321 | sandbox-write-verify |
| #40324 | plan-mode-strict-guard |
| #40344 | compound-inject-guard |
| #40352 | compaction-transcript-guard |
| #40354 | bashrc-safety-check |
| #40376 | api-retry-limiter |
| #40380 | system-message-workaround |
| #40382 | permission-entry-validator |
| #40383 |
cross-session-error-log, spec-file-scope-guard
|
| #40384 | session-permission-reset-guard |
| #40389 | read-all-files-enforcer |
| #40391 | session-resume-env-fix |
| #40401 | edit-counter-test-gate |
| #40421 |
cron-modification-guard, deploy-path-verify-guard
|
| #40425 | role-tool-guard |
| #40432 | headless-empty-result-guard |
| #40459 | subagent-claudemd-inject |
| #40463 | self-modify-bypass-guard |
| #40524 | token-spike-alert |
| #40714 | settings-auto-backup |
| #40807 | write-shrink-guard |
| #40850 | worktree-delete-guard |
| #40881 | token-spike-alert |
| #40929 | subagent-context-size-guard |
| #40930 | claudemd-violation-detector |
| #40931 | clear-command-confirm-guard |
| #41063 | read-only-mode |
| #41103 | permission-denial-enforcer |
| #41109 | task-integrity-guard |
| #41708 | powershell-remove-item-guard |
| #41737 | unbounded-output-guard |
| #41788 |
cache-creation-drift-detector, quota-anomaly-detector, session-rate-monitor
|
| #45108 | subagent-blast-radius-guard |
| #45596 | feature-deprecation-detector |
| #45756 |
cache-creation-drift-detector, quota-anomaly-detector, session-rate-monitor
|
| #45893 | git-filter-repo-guard |
| #46444 | subagent-destructive-git-guard |
| #46603 | transcript-contamination-detector |
| #46808 | worktree-hook-linker |
| #46828 | financial-operation-guard |
| #46829 |
cache-tier-logger, tokenizer-ratio-alert-corpus
|
| #46910 | pii-upload-guard |
| #46917 |
cache-creation-drift-detector, cache-tier-logger, quota-anomaly-detector, session-rate-monitor
|
| #46921 | settings-json-model-guard |
| #46950 | background-task-guard |
| #46968 | subagent-spawn-rate-monitor |
| #46991 | deny-bypass-detector |
| #47049 |
session-agent-cost-limiter, session-cost-alert
|
| #47180 | bypass-mode-effective-verifier |
| #47339 | dispatch-allowlist-preflight |
| #48792 | case-insensitive-path-guard |
| #48992 | dangerous-pip-flag-guard |
| #49102 | case-insensitive-path-guard |
| #49129 |
move-delete-sequence-guard, system-dir-protection-guard
|
| #49244 | claude-md-reinjector |
| #49268 | thinking-display-enforcer |
| #49464 | home-critical-bash-guard |
| #49539 |
dotfile-protection-guard, home-critical-bash-guard
|
| #49541 | model-version-lock |
| #49554 |
auto-mode-safety-enforcer, dotfile-protection-guard, home-critical-bash-guard, system-dir-protection-guard
|
| #49585 | cache-creation-spike-detector |
| #49593 | cache-creation-spike-detector |
| #49599 | quota-reset-cycle-monitor |
| #49615 |
dotfile-protection-guard, shell-config-truncation-guard
|
| #49618 | auto-mode-safety-enforcer |
| #49689 | model-version-change-alert |
| #49747 |
long-session-malformed-tool-call-detector, xml-format-leak-detector
|
| #49792 | move-delete-sequence-guard |
| #49893 | effort-tracking-logger |
| #50062 | mcp-startup-bloat-detector |
| #50204 | context-usage-drift-alert |
| #50207 | worktree-branch-pollution-detector |
| #50213 | subagent-spawn-rate-monitor |
| #50353 | repo-visibility-guard |
| #50389 | idle-session-cost-alert |
| #50669 | cowork-claude-md-load-checker |
| #50971 | production-port-kill-guard |
| #50975 | cjk-punctuation-guard |
| #50986 | tool-retry-budget-guard |
| #51010 | broad-find-guard |
| #51030 | dotenv-read-guard |
| #51054 | exploration-budget-guard |
| #51088 | compact-circuit-breaker |
| #51092 | thinking-stall-detector |
| #51123 | anthropic-base-url-guard |
| #51243 | claude-update-smart |
| #51281 | cowork-hook-absence-warner |
| #51288 | dispatch-allowlist-preflight |
| #51296 | cron-create-receipt |
| #51904 | cowork-hook-absence-warner |
| #52325 | sandbox-denywrite-enforcer |
| #52890 | claude-update-budget-guard |
| #53223 | agents-md-edit-drift-warner |
| #53638 | subscription-api-billing-warner |
| #53728 | subscription-api-billing-warner |
| #53765 | subagent-destructive-git-guard |
| #54677 | subscription-api-billing-warner |
| #55363 | halt-signal-detector |
| #55488 |
subagent-boundary-precheck, subagent-identity-leak-guard, subagent-identity-reassertion
|
| #55653 |
subagent-boundary-precheck, subagent-tool-allowlist-enforcer
|
| #55660 | subagent-boundary-precheck |
| #55666 |
subagent-boundary-precheck, subagent-spawn-verification-enforcer
|
| #55691 |
subagent-boundary-precheck, subagent-permission-mode-guard
|
| #55909 |
auth-path-detector, halt-signal-detector
|
| #56108 | cron-create-receipt |
| #56117 | bash-allowlist-secondary-check |
| #56239 | per-prompt-token-cap |
| #56252 | per-prompt-token-cap |
| #56259 | per-prompt-token-cap |
| #56265 | per-prompt-token-cap |
| #56276 | per-prompt-token-cap |
| #56292 | per-prompt-token-cap |
| #56293 | per-prompt-token-cap |
| #56297 | per-prompt-token-cap |
| #56351 | halt-signal-detector |
| #56603 | windows-destructive-command-guard |
| #56686 | dispatch-allowlist-preflight |
| #56738 | sql-bulk-delete-warn |
| #56739 | bash-project-fence |
| #57068 | subagent-inheritance-tester |
| #57224 | stale-temp-settings-detector |
| #57235 | mcp-startup-bloat-detector |
| #57271 | claim-verify-detector |
| #57285 | claim-verify-detector |
| #57288 |
claim-verify-detector, claim-vs-caveat-checker
|
| #57463 |
subagent-destructive-git-guard, workspace-lease-guard
|
| #57486 | settings-regression-tester |
| #57491 | settings-regression-tester |
| #57507 | subagent-inheritance-tester |
| #57946 | windows-python-stub-detector |
| #58570 | agent-view-quota-warn |
| #58806 | cross-product-mcp-spawn-detector |
| #59042 | version-regression-warner |
| #59047 | version-regression-warner |
| #59460 |
auth-status-checker, oauth-refresh-monitor
|
| #59498 | compound-command-deny-enforcer |
| #59628 | worktree-edit-boundary-guard |
| #59725 |
auth-status-checker, oauth-refresh-monitor
|
| #59823 | remote-control-billing-classifier |
| #59870 | settings-hooks-key-restorer |
| #59918 | version-regression-warner |
| #59921 |
skill-cumulative-size-detector, skill-description-drop-detector, version-regression-warner
|
| #59937 |
auth-macos-sleep-detector, auth-status-checker
|
| #59938 | standing-rule-session-surfacer |
| #59942 | version-regression-warner |
| #59944 | standing-rule-session-surfacer |
| #60093 | subscription-bypass-detector |
| #60104 |
auth-macos-sleep-detector, auth-status-checker
|
| #60107 | rhetorical-verification-prompt-detector |
| #60177 |
completion-claim-without-verification-detector, multi-file-plan-routing-gate, same-correction-arrest
|
| #60188 |
evidence-claim-gate, partial-view-claim-arrest, public-artefact-socratic-narrowing, refusal-arrest-gate
|
| #60226 |
ai-slop-punctuation-arrest, closure-word-verify-gate, dispatch-allowlist-preflight, dispatch-receipt, evidence-claim-gate, multi-file-plan-routing-gate, partial-view-claim-arrest, public-artefact-socratic-narrowing, refusal-arrest-gate, route-handler-emptiness-gate, same-correction-arrest, scope-expansion-receipt, skill-truncation-detector, workspace-lease-guard, worktree-hooks-path-fix
|
| #60260 |
auth-status-checker, oauth-refresh-monitor
|
| #60283 | redundant-read-blocker |
| #60323 | claudemd-tool-prohibition |
| #60339 | forbidden-response-phrase-detector |
| #60340 | fabricated-command-detector |
| #60366 |
aup-false-positive-helper, aup-large-tool-output-warner, aup-retry-loop-guard
|
| #60428 | mcp-misdiagnosis-arrest |
| #60451 | evidence-claim-gate |
| #60475 |
refusal-arrest-gate, scope-expansion-receipt, workspace-lease-guard, worktree-hooks-path-fix
|
| #60506 |
ai-slop-punctuation-arrest, closure-word-verify-gate, evidence-claim-gate, multi-file-plan-routing-gate, public-artefact-socratic-narrowing, refusal-arrest-gate, same-correction-arrest, workspace-lease-guard
|
| #60620 |
scope-expansion-receipt, worktree-hooks-path-fix
|
| #60742 | cli-config-pinning-detector |
| #60802 | transcript-contamination-detector |
| #60938 |
auth-expiry-reminder, auth-status-checker
|
| #60977 |
route-handler-emptiness-gate, scope-expansion-receipt
|
| #61015 | mcp-routine-approval-detector |
| #61027 | mcp-routine-approval-detector |
| #61044 | mcp-routine-approval-detector |
| #61056 | aup-false-positive-helper |
| #61097 | mcp-routine-approval-detector |
| #61102 |
articulated-scope-capture, dispatch-liveness-watchdog, scope-expansion-receipt
|
| #61107 |
dispatch-liveness-watchdog, route-handler-emptiness-gate, subagent-closure-verify-gate
|
| #61139 |
auth-status-checker, oauth-refresh-monitor
|
| #61141 | ephemeral-container-detector |
| #61148 | attachment-traversal-guard |
| #61167 |
articulated-scope-capture, dispatch-allowlist-preflight, dispatch-receipt, subagent-closure-verify-gate
|
| #61185 |
aup-false-positive-helper, aup-large-tool-output-warner
|
| #61303 |
dispatch-allowlist-preflight, post-edit-disk-verify
|
| #61315 |
dispatch-allowlist-preflight, dispatch-liveness-watchdog
|
| #61337 |
askuserquestion-autonomy-gate, authorized-reconfirmation-detector
|
| #61349 | memory-orphan-detector |
| #61388 | commitment-carry-forward-arrest |
| #61405 | dispatch-liveness-watchdog |
| #61563 | auth-status-checker |
| #61638 | aup-false-positive-helper |
| #61664 | aup-retry-loop-guard |
| #61692 | cowork-model-picker-advisor |
| #61699 |
deployment-readback-gate, deployment-readback-gh-adapter
|
| #61748 | mcp-orphan-leak-warner |
| #61869 | cowork-model-picker-advisor |
| #61912 |
auth-expiry-reminder, auth-status-checker, oauth-refresh-monitor
|
| #61923 | auth-status-checker |
| #61929 | authorized-reconfirmation-detector |
| #61983 | authorized-reconfirmation-detector |
| #61989 | iteration-quality-degradation-detector |
| #62016 | rg-replace-flag-detector |
| #62036 | cron-create-receipt |
| #62061 | server-side-prompt-injection-detector |
| #62078 | skills-context-recorder |
| #62100 | cowork-model-picker-advisor |
| #62103 |
auth-expiry-reminder, auth-status-checker
|
| #62108 | skills-context-recorder |
| #62123 |
extended-thinking-tool-use-mismatch-detector, long-session-malformed-tool-call-detector, spurious-malformed-notice-detector, xml-format-leak-detector
|
| #62190 |
aup-false-positive-helper, aup-retry-loop-guard
|
| #62193 |
bash-fanout-bounded-rewriter, nested-spawn-inflight-guard
|
| #62199 | cowork-model-picker-advisor |
| #62205 |
compact-dispatch-watchdog, growthbook-flag-monitor
|
| #62344 |
extended-thinking-tool-use-mismatch-detector, long-session-malformed-tool-call-detector, spurious-malformed-notice-detector, xml-format-leak-detector
|
| #62354 |
auth-expiry-reminder, auth-status-checker
|
| #62371 | agents-md-edit-drift-warner |
| #62421 | skills-settings-validator |
| #62437 | broad-prefix-session-trap-warner |
| #62467 |
extended-thinking-tool-use-mismatch-detector, long-session-malformed-tool-call-detector, spurious-malformed-notice-detector, xml-format-leak-detector
|
| #62639 | binary-read-detector |
| #62696 | ultrareview-large-diff-advisor |
| #62700 |
extended-thinking-tool-use-mismatch-detector, long-session-malformed-tool-call-detector, spurious-malformed-notice-detector, xml-format-leak-detector
|
| #62709 | ultrareview-large-diff-advisor |
| #62787 | ultrareview-large-diff-advisor |
| #62790 |
auth-status-checker, multi-window-auth-drift-detector
|
| #62859 |
cowork-claude-md-load-checker, cowork-hook-absence-warner
|
| #62876 | ultrareview-large-diff-advisor |
| #62932 |
cowork-fuse-staleness-watcher, cowork-hook-absence-warner
|
| #62949 |
cowork-hook-absence-warner, cowork-model-picker-advisor
|
| #62961 | non-english-quality-warner |
| #63015 |
compact-dispatch-watchdog, growthbook-flag-monitor
|
| #63047 | cowork-hook-absence-warner |
| #63117 | ultrareview-large-diff-advisor |
| #63147 |
extended-thinking-loop-guard, extended-thinking-resume-warning
|
| #63185 |
auth-expiry-reminder, auth-status-checker
|
| #63356 | subagent-blast-radius-guard |
| #63360 | cowork-hook-absence-warner |
| #63366 | claude-code-version-pin-advisor |
| #63396 | claude-code-version-pin-advisor |
| #63412 | opus48-thinking-wedge-advisor |
| #63455 |
opus48-routine-task-warning, output-token-spike-detector
|
| #63457 | claude-code-version-pin-advisor |
| #63469 | claude-code-version-pin-advisor |
| #63473 | claude-code-version-pin-advisor |
| #63510 | claude-code-version-pin-advisor |
| #63522 | ultrareview-large-diff-advisor |
| #63606 | opus48-thinking-wedge-advisor |
| #63607 | opus48-thinking-wedge-advisor |
| #63612 | opus48-thinking-wedge-advisor |
| #63715 | pre-bash-sed-line-ending-windows |
| #63763 | destructive-migration-write-guard |
| #63887 |
echo-probe-spam-detector, same-command-repeat-detector
|
| #63919 |
auth-expiry-reminder, auth-status-checker
|
| #64017 | stop-hook-sigterm-wrapper |
| #64022 | plugin-hooks-json-bloat-detector |
| #64047 |
parallel-batch-size-limiter, parallel-cascade-detector, tool-result-correlation-checker
|
| #64048 |
pre-execution-claim-detector, tool-result-correlation-checker
|
| #64052 |
parallel-batch-size-limiter, parallel-cascade-detector, tool-result-correlation-checker
|
| #64055 |
pre-execution-claim-detector, tool-result-correlation-checker
|
| #64056 | destructive-db-script-write-guard |
| #64059 |
parallel-batch-size-limiter, parallel-cascade-detector, tool-result-correlation-checker
|
| #64065 |
pre-execution-claim-detector, tool-result-correlation-checker
|
| #64076 |
pre-execution-claim-detector, tool-result-correlation-checker
|
| #64095 |
pre-execution-claim-detector, tool-result-correlation-checker
|
| #64102 |
opus48-routine-task-warning, output-token-spike-detector
|
| #64103 |
pre-execution-claim-detector, tool-result-correlation-checker
|
| #64118 | tool-result-correlation-checker |
| #64143 |
opus48-routine-task-warning, output-token-spike-detector
|
| #64152 |
opus48-routine-task-warning, output-token-spike-detector
|
| #64153 |
opus48-routine-task-warning, output-token-spike-detector, thinking-budget-effort-mismatch-detector
|
| #64242 | bg-permission-prompt-warner |
| #64244 | bg-permission-prompt-warner |
| #64250 | bg-permission-prompt-warner |
| #64271 | bg-permission-prompt-warner |
| #64272 | bg-permission-prompt-warner |
| #64273 | bg-permission-prompt-warner |
| #64310 | powershell-remove-item-guard |
| #64334 | redirect-fragment-warner |
| #64343 | echo-probe-spam-detector |
| #64366 | mcp-orphan-leak-warner |
| #64445 | cost-incident-self-audit |
| #64559 | rm-safety-net |
| #64613 | subscription-api-billing-warner |
| #65152 | subagent-blast-radius-guard |
| #65283 | persisted-1m-model-advisor |
| #65329 | persisted-1m-model-advisor |
| #65517 | flask-static-route-guard |
| #65545 | persisted-1m-model-advisor |
| #65563 | mcp-tool-guard |
| #65636 |
cost-incident-self-audit, image-dimension-guard
|
| #65678 | persisted-1m-model-advisor |
| #65684 |
cost-incident-self-audit, webfetch-runaway-guard
|
| #65789 | unbounded-output-guard |
| #65870 | context-length-budget |
| #65880 | false-disk-full-guard |
| #65944 |
cost-incident-self-audit, git-push-blast-radius-guard
|
| #65985 | api-busyloop-guard |
| #66020 | mcp-orphan-leak-warner |
| #66232 | disabled-feature-toggle-advisor |
| #66339 | daemon-zombie-worker-surfacer |
| #66358 | daemon-zombie-worker-surfacer |
| #67917 | session-start-safety-check |
| #68642 | background-cost-launch-guard |
| #68647 | mcp-orphan-leak-warner |
| #68915 | commit-all-scope-guard |
| #68920 | git-submodule-guard |
| #68933 | mcp-orphan-leak-warner |
| #68962 | edit-quote-ambiguity-guard |
| #69053 | credential-exfil-guard |
| #69059 | block-database-wipe |
| #69397 |
cloud-cli-guard, powershell-remove-item-guard, windows-destructive-command-guard
|
| #69793 | rm-safety-net |
| #69850 | uncommitted-discard-guard |
| #70024 | cloud-cli-guard |
| #70112 | reroute-after-block-guard |
| #70414 | write-nul-corruption-detector |
| #70687 | git-rm-orphan-wipe-guard |
| #71602 | subagent-forged-system-reminder-guard |
| #71612 | subagent-forged-system-reminder-guard |
| #72666 | write-empty-content-guard |
| #73829 | nested-background-agent-guard |
| #73848 | nested-background-agent-guard |
| #73937 | stop-transcript-write-health |
| #73952 | session-plugin-pin-watch |
| #74547 | warn-cron-cost-trap |
| #77212 | memory-write-guard |
| #78273 |
record-read-coverage, write-overwrite-confirm
|
| #95199 | handoff-on-clear |