From Hook

What From Hook is

From Hook is a slash command published in the athola/claude-night-market repository on GitHub, which has about 339 stars. The repository describes itself as: “23 Claude Code plugins: TDD enforcement hooks, git/PR workflows, spec-driven development, code review, project lifecycle, fix-from-error, maintenance automation, context optimization, research, and multi-LLM delegation. 186 skills, 128 commands, 54 agents.”

A slash command is a reusable prompt saved as a markdown file and run by typing its name after a slash. In Claude Code, custom commands have been merged into skills: a file in .claude/commands/ and a skill folder in .claude/skills/ both create the same kind of command, and existing command files keep working.

From Hook gives you a repeatable way to run the same instructions without retyping them, optionally with arguments.

How to install From Hook

New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.

Inside the source file

An excerpt from plugins/hookify/commands/from-hook.md, shared under the repository's MIT license. Read the full file on GitHub.

/hookify:from-hook <hook_file.py>           # Convert single hook
/hookify:from-hook --scan <hooks_dir>       # Scan directory
/hookify:from-hook <hook.py> -o rules.md    # Output to file

import re
def hook(context):
    if re.search(r"rm -rf /", context["command"]):
        return {"action": "block", "message": "Dangerous!"}

---
name: block-rm-rf
event: bash
pattern: 'rm -rf /'
action: block
---
Dangerous command blocked.

Before you install

• Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
• Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
• Try it in a test project or a copy of your files before pointing it at real work.
• Pin the version you tested, and review changes before updating.
• Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.

FAQ