Env File Protection
Prevent writing to .env files using the if condition for lightweight filtering. Blocks any Write tool call targeting .env* files, protecting secrets from accidental overwrites. Uses the if field to avoid spawning a process unless the file pattern matches.
npx claude-code-templates@latest --hook security/env-file-protection claude-code — env-file-protection
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
3 observations
scanner score 26/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Credential AccessPrivilege Escalation · SKILL.md:3
- Credential Access ×2Privilege Escalation · env-file-protection.json:2
Learn more about NVIDIA SkillSpector.
Content
JSON
{
"description": "Prevent writing to .env files using the if condition for lightweight filtering. ..."
"hooks": {
"PreToolUse": [1 item]
}
}