From 7ed590872b99bba56bd7d3c54b5d62765e6a85c5 Mon Sep 17 00:00:00 2001 From: Igor Ganapolsky Date: Fri, 5 Jun 2026 17:36:31 -0400 Subject: [PATCH 1/2] Add ThumbGate to Hooks and Guardrails --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 98e2dfc..5352a62 100644 --- a/README.md +++ b/README.md @@ -103,6 +103,7 @@ *Hook systems and runtime enforcement for Claude Code.* - [claude-code-safety-net](https://github.com/kenryu42/claude-code-safety-net) - Plugin intercepting destructive git/filesystem commands before execution. Semantic argument parsing distinguishes safe from dangerous operations. +- [ThumbGate](https://github.com/IgorGanapolsky/ThumbGate) - Local-first PreToolUse firewall for AI coding agents (Claude Code, Cursor, Codex, Gemini). Blocks destructive shell, secret writes, and off-scope edits at the tool-call boundary before execution; thumbs-down feedback auto-promotes to persistent prevention rules enforced across later sessions. Deterministic gate engine, runs on-device, MIT. `npx thumbgate init`. - [Lasso claude-hooks](https://github.com/lasso-security/claude-hooks) - Prompt injection defense hooks: scans files, web fetches, and command output in real-time. Detects 50+ injection patterns in READMEs, HTML comments, and docs. - [claude-code-hooks-mastery](https://github.com/disler/claude-code-hooks-mastery) - Advanced hook patterns and techniques for Claude Code security automation. - [claudekit](https://github.com/carlrannaberg/claudekit) - Toolkit of custom commands, hooks, and security utilities for Claude Code. From 631bb05945ffd2b7c83a012009fffce3f5a19dd8 Mon Sep 17 00:00:00 2001 From: Igor Ganapolsky Date: Fri, 5 Jun 2026 17:39:01 -0400 Subject: [PATCH 2/2] Disclose default CLI telemetry (opt-out) for accuracy --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 5352a62..160d39f 100644 --- a/README.md +++ b/README.md @@ -103,7 +103,7 @@ *Hook systems and runtime enforcement for Claude Code.* - [claude-code-safety-net](https://github.com/kenryu42/claude-code-safety-net) - Plugin intercepting destructive git/filesystem commands before execution. Semantic argument parsing distinguishes safe from dangerous operations. -- [ThumbGate](https://github.com/IgorGanapolsky/ThumbGate) - Local-first PreToolUse firewall for AI coding agents (Claude Code, Cursor, Codex, Gemini). Blocks destructive shell, secret writes, and off-scope edits at the tool-call boundary before execution; thumbs-down feedback auto-promotes to persistent prevention rules enforced across later sessions. Deterministic gate engine, runs on-device, MIT. `npx thumbgate init`. +- [ThumbGate](https://github.com/IgorGanapolsky/ThumbGate) - Local-first PreToolUse firewall for AI coding agents (Claude Code, Cursor, Codex, Gemini). Blocks destructive shell, secret writes, and off-scope edits at the tool-call boundary before execution; thumbs-down feedback auto-promotes to persistent prevention rules enforced in later sessions. Deterministic gate engine, MIT. Sends anonymous CLI telemetry by default (opt-out: `THUMBGATE_NO_TELEMETRY=1`). - [Lasso claude-hooks](https://github.com/lasso-security/claude-hooks) - Prompt injection defense hooks: scans files, web fetches, and command output in real-time. Detects 50+ injection patterns in READMEs, HTML comments, and docs. - [claude-code-hooks-mastery](https://github.com/disler/claude-code-hooks-mastery) - Advanced hook patterns and techniques for Claude Code security automation. - [claudekit](https://github.com/carlrannaberg/claudekit) - Toolkit of custom commands, hooks, and security utilities for Claude Code.