Hooks
Event-driven scripts that run automatically at points in the Claude Code lifecycle.
What are you trying to do?
PreToolUse
Hookify plugin - User-configurable hooks from .local.md files
PreToolUsecan blockPostToolUse
PostToolUsecan blockUserPromptSubmit
Hookify plugin - User-configurable hooks from .local.md files
UserPromptSubmitobservesUserPromptExpansion
UserPromptExpansionobservesTaskCompleted
TaskCompletedobservesElicitation
ElicitationobservesSessionStart
Cortex Code plugin hooks.
SessionStartobservesSessionEnd (clear|resume|logout|prompt_input_exit|bypass_permissions_disabled|other)
SessionEndobservesStopFailure
StopFailureobservesPostToolUse (Edit|Write|MultiEdit|NotebookEdit)
Security guidance plugin — pattern-based warnings on edits, git-diff-based LLM review on stop
PostToolUsecan blockUserPromptSubmit
UserPromptSubmitcan blockSessionStart (*)
Product Management plugin hooks for staleness detection and GitHub sync prompts
SessionStartobservesUserPromptExpansion (^claude-security:claude-security$)
A display-only banner: on the /claude-security menu it prints the Claude Security banner as a systemMessage. It fires only on UserPromptExpansion for that slash command. It is a sensor: it emits a message and never returns a permission decision.
UserPromptExpansionobservesSessionStart
SessionStartobservesSessionStart (startup|resume|clear)
SessionStartobservesSessionStart
Security guidance plugin — pattern-based warnings on edits, git-diff-based LLM review on stop
SessionStartobservesSessionStart (resume)
SessionStartobservesNotification
NotificationobservesPreToolUse (use_aws|mcp__aws.*|mcp__plugin_.*aws-mcp.*)
PreToolUsecan blockSessionStart
SessionStartobservesSessionStart (startup)
SessionStartobservesPostCompact
PostCompactobservesSubagentStop
SubagentStopobservesPreToolUse
PreToolUseobserves