Skip to main content
hc
Submit
Claude Code hooks · hooks · 12 picks

Best Claude Code hooks for safer agent workflows

Reviewed hooks for testing, security, repository hygiene, and repeatable Claude Code automation.

Curated by @heyclaude-editors Updated 2026-07-18

Reviewed hooks for testing, security, repository hygiene, and repeatable Claude Code automation.

Short answer

Pick a hook by the event it fires on and what it executes. Most hooks run on PostToolUse — ideal for linting, tests, and formatting after Claude edits a file — while Stop and Notification hooks gate or announce session events. Favor hooks that document their safety and privacy behavior and install as a project-local shell script you can read before enabling.

How to choose

Hook event
Match the trigger to your workflow: PostToolUse for checks after edits, Stop to gate session end, Notification for alerts.
Disclosed behavior
Hooks run shell commands automatically. Read the documented safety and privacy notes — what each hook executes and what data it reads — before enabling it.
Source you can verify
Prefer source-backed hooks whose script is in a public repository you can review.
Setup footprint
Most install as a single project-local .claude/hooks script with no extra prerequisites.

Compared at a glance

The top 5 picks side by side on trust, install, platform support, and disclosed notes — full rationale for each below.

Field
Git Pre Commit Validator - Hooks

Comprehensive pre-commit hook that validates code quality, runs tests, and enforces standards.

Open dossier
Code Test Runner Hook - Hooks

A PostToolUse hook that runs the matching test runner for a changed file's language — Jest or Vitest for JS/TS, pytest for Python, go test, or Maven/Gradle for Java — scoped to the edited file.

Open dossier
Dependency Update Checker - Hooks

Automatically checks for outdated dependencies and suggests updates with security analysis. This PostToolUse hook triggers when dependency manifest files (package.json, requirements.txt, Gemfile, go.mod, Cargo.toml, pyproject.toml) are modified, providing real-time dependency health monitoring.

Open dossier
Git Auto Commit On Stop - Hooks

Automatically commits all changes with a summary when Claude Code session ends.

Open dossier
Jest Snapshot Auto Updater - Hooks

Automatically updates Jest snapshots when component files are modified significantly.

Open dossier
Next steps
Open dossierAPI JSONOpen LLMOpen sourceNewsletterClaim listing
Open dossierAPI JSONOpen LLMOpen sourceNewsletterClaim listing
Open dossierAPI JSONOpen LLMOpen sourceNewsletterClaim listing
Open dossierAPI JSONOpen LLMOpen sourceNewsletterClaim listing
Open dossierAPI JSONOpen LLMOpen sourceNewsletterClaim listing
Trust
Review statusReviewedMaintainer reviewedReviewedMaintainer reviewedReviewedMaintainer reviewedReviewedMaintainer reviewedReviewedMaintainer reviewed
Package trustPackage not verifiedPackage not verifiedPackage not verifiedPackage not verifiedPackage not verified
Source provenanceSource-backedSource-backedSource-backedSource-backedSource-backed
Submitter—————
Install riskReview firstReview firstReview firstReview firstReview first
Notes Safety ✓ Privacy ✓ Safety ✓ Privacy ✓ Safety ✓ Privacy ✓ Safety ✓ Privacy ✓ Safety ✓ Privacy ✓
Brand—————
Categoryhookshookshookshookshooks
SourceSource-backedSource-backedSource-backedSource-backedSource-backed
AuthorJSONboredJSONboredJSONboredJSONboredJSONbored
Added2025-09-162025-09-162025-09-162025-09-192025-09-19
Platforms
Claude Code
Claude Code
Claude Code
Claude Code
Claude Code
Harness
Claude Code
Claude Code
Claude Code
Claude Code
Claude Code
Source repo—————
Safety notes✓Runs automatically on its configured Claude Code hook event and executes shell logic that can read, modify, or delete files in your project (and may run builds, installs, or network calls); review the script and scope it to expected paths before enabling.✓Runs your project's test command automatically after each edit; tests execute arbitrary project code, so enable this only in a trusted repo and expect it to run frequently. The script invokes whichever runner it detects (npm test, npx vitest, pytest, go test, mvn/gradle); make sure the right one is installed so it does not run an unexpected command.✓Runs automatically on its configured Claude Code hook event and executes shell logic that can read, modify, or delete files in your project (and may run builds, installs, or network calls); review the script and scope it to expected paths before enabling.✓Runs automatically at session end and stages all unignored repository changes with git add -A. Creates a local commit when changes are present unless SKIP_AUTO_COMMIT=true is set. Only warns on sensitive-looking filenames and does not block the commit by default.✓Runs automatically on its configured Claude Code hook event and executes shell logic that can read, modify, or delete files in your project (and may run builds, installs, or network calls); review the script and scope it to expected paths before enabling.
Privacy notes✓Receives Claude Code hook input (session metadata, file paths, and tool output) and reads local project files; review what the script logs or forwards to external services and keep credentials out of its output.✓Runs locally and prints test output to the hook; that output can include file paths, test names, and any data your tests log.✓Receives Claude Code hook input (session metadata, file paths, and tool output) and reads local project files; review what the script logs or forwards to external services and keep credentials out of its output.✓Reads git status, branch name, staged diff statistics, and changed file names to build the commit message. Can commit newly created or modified local files, including private work, when they are not excluded by .gitignore. Commit metadata uses the locally configured git user name and email.✓Receives Claude Code hook input (session metadata, file paths, and tool output) and reads local project files; review what the script logs or forwards to external services and keep credentials out of its output.
Prerequisites— none listed— none listed— none listed— none listed— none listed
Install
mkdir -p .claude/hooks && touch .claude/hooks/git-pre-commit-validator.sh && chmod +x .claude/hooks/git-pre-commit-validator.sh
mkdir -p .claude/hooks && touch .claude/hooks/code-test-runner-hook.sh && chmod +x .claude/hooks/code-test-runner-hook.sh
mkdir -p .claude/hooks && touch .claude/hooks/dependency-update-checker.sh && chmod +x .claude/hooks/dependency-update-checker.sh
mkdir -p .claude/hooks && touch .claude/hooks/git-auto-commit-on-stop.sh && chmod +x .claude/hooks/git-auto-commit-on-stop.sh
mkdir -p .claude/hooks && touch .claude/hooks/jest-snapshot-auto-updater.sh && chmod +x .claude/hooks/jest-snapshot-auto-updater.sh
Config
{
  "hooks": {
    "preToolUse": {
      "script": "./.claude/hooks/git-pre-commit-validator.sh",
      "matchers": [
        "git"
      ]
    }
  }
}
{
  "hooks": {
    "postToolUse": {
      "script": "./.claude/hooks/code-test-runner-hook.sh",
      "matchers": [
        "write",
        "edit",
        "multiedit"
      ]
    }
  }
}
{
  "hooks": {
    "postToolUse": {
      "script": "./.claude/hooks/dependency-update-checker.sh",
      "matchers": [
        "write",
        "edit"
      ]
    }
  }
}
{
  "hooks": {
    "stop": {
      "script": "./.claude/hooks/git-auto-commit-on-stop.sh"
    }
  }
}
{
  "hooks": {
    "postToolUse": {
      "script": "./.claude/hooks/jest-snapshot-auto-updater.sh",
      "matchers": [
        "write",
        "edit"
      ]
    }
  }
}
Citations
ClaimUnclaimedUnclaimedUnclaimedUnclaimedUnclaimed
Open 4 picks in the interactive comparison tool
  1. 01

    Git Pre Commit Validator - Hooks

    Comprehensive pre-commit hook that validates code quality, runs tests, and enforces standards.

    Trigger:PreToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Git Pre Commit Validator - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  2. 02

    Code Test Runner Hook - Hooks

    After an edit, runs the right test runner for that file — Jest/Vitest, pytest, go test, or Maven/Gradle — against the related tests.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Code Test Runner Hook - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  3. 03

    Dependency Update Checker - Hooks

    Automatically checks for outdated dependencies and suggests updates with security analysis.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Dependency Update Checker - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  4. 04

    Git Auto Commit On Stop - Hooks

    Automatically commits all changes with a summary when Claude Code session ends.

    Trigger:Stop
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Git Auto Commit On Stop - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  5. 05

    Jest Snapshot Auto Updater - Hooks

    Automatically updates Jest snapshots when component files are modified significantly.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Jest Snapshot Auto Updater - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  6. 06

    Playwright Test Runner - Hooks

    Automatically runs Playwright E2E tests when test files or page components are modified.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Playwright Test Runner - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  7. 07

    React Test Generator

    Automatically creates or updates test files when React components are modified.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    React Test Generator is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  8. 08

    Security Scanner Hook - Hooks

    Automated security vulnerability scanning that integrates with development workflow to detect and prevent security issues before deployment.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Security Scanner Hook - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  9. 09

    Test Runner Hook - Hooks

    Automatically run relevant tests when code changes are detected, with intelligent test selection and parallel execution.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Test Runner Hook - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  10. 10

    Accessibility Checker - Claude Code Hooks

    Automated accessibility testing and compliance checking for web applications following WCAG 2.1 and WCAG 2.2 guidelines.

    Trigger:PostToolUse
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Accessibility Checker - Claude Code Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  11. 11

    Dependency Security Audit

    Stop hook that runs npm audit, pip-audit, safety, or bundler-audit at session end and saves a timestamped CVE report.

    Trigger:Stop
    Added 10mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Dependency Security Audit is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

  12. 12
    Docker logo

    Docker Image Security Scanner - Hooks

    Comprehensive Docker image vulnerability scanning with layer analysis, base image recommendations, and security best practices enforcement.

    Trigger:PostToolUse
    Added 9mo ago
    hooksReview firstSource-backedReview first
    Safety ✓ Privacy ✓by JSONbored
    Why it made the cut

    Docker Image Security Scanner - Hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

Missing a pick? Propose an edit to this list — every change goes through the same review queue as new entries.

Suggest a pick
Weekly · Sundays

Get the weekly brief

One calm read on Claude workflows. Sundays. No tracking pixels.

Unsubscribe any time. No tracking pixels. No partner blasts.