Large Edit Confirmation

Mods security 17 Scanned by NVIDIA SkillSpector

Install Command

npx claude-code-templates@latest --mod security/large-edit-confirmation

View on GitHub

claude-code — large-edit-confirmation

Scanned by NVIDIA SkillSpector

Automated static analysis (no LLM) · v2.12.0 · 2026-10-17

Partial analysis: some checks could not run on this component.

2 observations

scanner score 29/100

SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.

Agent Config Directory Access
Agent Snooping · README.md:20
MCP server referenced without pinned version: 'npx claude-code-templates'.
MCP Rug Pull · README.md:29

Learn more about NVIDIA SkillSpector.

Content

Claude Mod. A mod is a complete Claude Code plugin built on function hooks (Anthropic's mods/ layout); it is on by default in Claude Code 2.1.287+. Hooks module: hooks/large-edit-confirmation.ts. Options: maxLines, headless (set in user or managed settings pluginConfigs, or /config). Run claude plugin validate on the installed folder to see every event it hooks and every $ call it makes.

large-edit-confirmation

Asks the user, in the engine's own AskUserQuestion dialog, before Claude edits or overwrites a file larger than a configurable number of lines. A tool.call hook on Edit / Write: it reads the file through $.fs.read, asks through $.ui.ask, then either calls next(e) or returns { deny }.

$.ui.ask rejects in a headless (claude -p) run, where nobody can answer; the headless option decides what happens then (deny by default).

If the check itself fails before the edit runs, the edit is denied, never let through unconfirmed.

Options

  maxLines: number            files above this many lines need confirmation (default 1000)
  headless: "deny" | "allow"  what to do when there is nobody to ask (default "deny")

Declared in .claude-plugin/plugin.json (userConfig). Set them in /config, in user settings (~/.claude/settings.json, not project settings), with --settings <file> or in managed settings:

json

{ "pluginConfigs": { "large-edit-confirmation@skills-dir": { "options": { } } } }

Install

npx claude-code-templates@latest --mod security/large-edit-confirmation
claude

It is written to .claude/skills/large-edit-confirmation/, which Claude Code auto-loads as large-edit-confirmation@skills-dir. For one session with hot reload: claude --plugin-dir .claude/skills/large-edit-confirmation. claude plugin validate .claude/skills/large-edit-confirmation prints every event it hooks and every $ call it makes.

Requirements. Mods are on by default in Claude Code 2.1.287+. Typed against Anthropic's declarations: https://github.com/anthropics/claude-code/tree/main/mods