| name | work-scope-guard |
| description | Inspect work-scope safety reminders for company/work dirs, sensitive URLs, internal data routing, and hook overlays. |
Work Scope Guard
Use the tracked hook and keep it generic; do not hardcode secrets.
Workflow
Resolve the checkout explicitly; never assume the caller's cwd:
DOTFILES_DIR="${DOTFILES_DIR:-$HOME/work/dotfiles}"
test -f "$DOTFILES_DIR/configs/hooks/work-scope-guard.sh"
- Inspect
$DOTFILES_DIR/configs/hooks/work-scope-guard.sh and $DOTFILES_DIR/configs/claude-settings.json.
- Verify the hook is linked by
$DOTFILES_DIR/install.sh into ~/.claude/hooks/work-scope-guard.sh.
- Test with a synthetic hook payload and a temporary work-like cwd when changing behavior.
- Keep output advisory and fail-open. This guard must remind, not block ordinary tools.
Safety
- No tokens, emails, internal hostnames, or private URLs in the public hook.
- Company-specific overlays belong in
company/ or local ignored files.