360 Secure SkillHub
360 安全技能中心

rule-catalog

核心功能是提供Git安全、Python质量、安全管控等多类预构建hookify规则,支持按分类浏览,可通过Claude协助、Python脚本或手动方式安装单条、分类或全部规则,安装后可自定义参数。典型场景为项目初期配置规范、不想从零编写规则时使用。输入为规则名称/分类指令,输出为安装确认或规则列表。

athola
athola
热度 62.92
最近更新 2026-08-26 21:13:46
分类:开发依赖:代码执行 / 读写文件 / 内部调用大模型应用场景:DevOps / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add nm-hookify-rule-catalog
Metadata
name
rule-catalog
description
Browse hookify rule catalog
version
1.9.8
triggers
["hookify","rules","catalog","install","templates","installing pre-built rules or browsing categories"]
metadata
{"openclaw":{"homepage":"https://github.com/athola/claude-night-market/tree/master/plugins/hookify","emoji":"🦞"}}
source
claude-night-market
source_plugin
hookify

Night Market Skill — ported from claude-night-market/hookify. For the full experience with agents, hooks, and commands, install the Claude Code plugin.

When To Use

  • Browsing available hookify rules by category
  • Installing standard pre-built rules into a project
  • Looking for ready-made rules before writing custom ones

When NOT To Use

  • Writing custom rules from scratch — use hookify:writing-rules instead
  • Debugging or modifying existing installed rules
  • Converting Python SDK hooks — use hookify:from-hook instead

Table of Contents

Hookify Rule Catalog

Pre-built rules for common scenarios. Install directly or use as templates.

Quick Install

# Install a specific rule
Skill(hookify:rule-catalog) then install git:block-force-push

# Or use the Python installer for bulk operations
python3 plugins/hookify/scripts/install_rule.py git:block-force-push
python3 plugins/hookify/scripts/install_rule.py --category git
python3 plugins/hookify/scripts/install_rule.py --all

Verification: Run python --version to verify Python environment.

Available Rules

git/ - Git Safety

Rule Action Default Description
block-force-push block enabled Prevent force push to main/master
block-destructive-git block enabled Block reset --hard, checkout -- ., clean -fd, etc.
warn-risky-git warn enabled Warn about rebase -i, soft reset, etc.
warn-large-commits warn enabled Warn about large binary files

python/ - Python Quality

Rule Action Default Description
block-dynamic-code block enabled Block dangerous dynamic code execution
warn-print-statements warn enabled Encourage logging over print()

security/ - Security Gates

Rule Action Default Description
require-security-review block enabled Require review for auth code
destructive-command-guard warn enabled Warn on destructive commands targeting prod-shaped paths

workflow/ - Workflow Enforcement

Rule Action Default Description
enforce-scope-guard warn enabled Anti-overengineering (imbue)
require-spec-before-code block disabled Spec-first development

performance/ - Resource Management

Rule Action Default Description
warn-large-file-ops warn enabled Watch large file writes

Installation Instructions

Method 1: Claude-Assisted (Recommended)

When you invoke this skill, tell Claude which rule(s) to install:

**Verification:** Run `git status` to confirm working tree state.
Install git:block-force-push

Verification: Run the command with --help flag to verify availability.

Claude will:

  1. Read the rule from skills/rule-catalog/rules/git/block-force-push.md
  2. Write it to .claude/hookify.block-force-push.local.md
  3. Confirm installation

Method 2: Python Script

For bulk operations or automation:

# Install single rule
python3 plugins/hookify/scripts/install_rule.py git:block-force-push

# Install all rules in category
python3 plugins/hookify/scripts/install_rule.py --category python

# Install all rules
python3 plugins/hookify/scripts/install_rule.py --all

# List available rules
python3 plugins/hookify/scripts/install_rule.py --list

# Install to custom directory
python3 plugins/hookify/scripts/install_rule.py git:block-force-push --target /path/to/.claude

Verification: Run the command with --help flag to verify availability.

Method 3: Manual Copy

  1. Find rule in plugins/hookify/skills/rule-catalog/rules/<category>/<rule>.md
  2. Copy to .claude/hookify.<rule-name>.local.md
  3. Edit enabled: true/false as needed

Rule File Locations

Rules are stored relative to this skill:

**Verification:** Run the command with `--help` flag to verify availability.
skills/rule-catalog/
├── SKILL.md (this file)
└── rules/
    ├── git/
    │   ├── block-force-push.md
    │   ├── block-destructive-git.md
    │   ├── warn-risky-git.md
    │   └── warn-large-commits.md
    ├── python/
    │   ├── block-dynamic-code.md
    │   └── warn-print-statements.md
    ├── security/
    │   ├── require-security-review.md
    │   └── destructive-command-guard.md
    ├── workflow/
    │   ├── enforce-scope-guard.md
    │   └── require-spec-before-code.md
    └── performance/
        └── warn-large-file-ops.md

Verification: Run the command with --help flag to verify availability.

Customizing Rules

After installation, edit the rule in .claude/:

# Change action from warn to block
action: block

# Disable temporarily
enabled: false

# Modify pattern
pattern: your-custom-pattern

Verification: Run the command with --help flag to verify availability.

Creating Pull Requests for New Rules

To add rules to the catalog:

  1. Create rule file in appropriate category
  2. Follow naming convention: kebab-case.md
  3. Include detailed message with alternatives
  4. Test thoroughly before submitting
  5. Update this SKILL.md catalog table

Related

  • Skill(hookify:writing-rules) - Create custom rules
  • /hookify:list - Show installed rules
  • /hookify:configure - Manage installed rules