| name | codex-hook-checker |
| description | Check Codex hooks.json schemas, supported events, command references, timeouts, matchers, and failure behavior. Use before trusting, installing, or changing plugin-bundled lifecycle hooks. |
Codex Hook Checker
Resolve every ../../scripts and ../../references path relative to this SKILL.md directory, never the caller working directory.
Verify manifest structure and execute handlers as hostile boundaries with controlled inputs.
Workflow
-
Read ../../references/codex-artifact-contracts.md and inventory all referenced handlers.
-
Run:
python3 ../../scripts/check_codex_artifact.py hook hooks/hooks.json
-
Check supported event names, matcher scope, command type, positive bounded timeouts, status messages, and duplicate lifecycle ownership.
-
Resolve PLUGIN_ROOT references and fail missing, non-portable, unquoted, or escaping paths.
-
Inspect handlers for secrets, unsafe shell interpolation, swallowed failures, unexpected network use, and writes outside intended roots.
-
Execute valid, malformed, failing, and timeout cases in a temporary directory without live credentials.
-
When available, compare discovery through hooks/list with the checked manifest.
Result
Return PASS only when static and isolated execution checks succeed. Otherwise return FAIL with event, handler path, reproduction, and impact.
