Description
block-no-verify-hook is an agent skill from the wshobson/agents collection that sets up a PreToolUse hook to stop AI coding agents from skipping git pre-commit checks. AI agents such as Claude Code and Codex can run shell commands with flags like --no-verify, which bypass pre-commit hooks. That defeats the linting, formatting, testing and security checks a team has configured, and the skill notes that other bypass flags, such as --no-gpg-sign on commits and --no-verify on merges and pushes, can skip safety steps in the same way. The hook added by the skill inspects each tool call before it runs and rejects any call that contains a bypass flag, so the command never executes. The skill explains the problem and the configuration, and it is meant for teams that want to use AI agents on their repositories while keeping their existing commit and push checks in force. It is a configuration task, so the agent writes or edits the hook settings in the project, and the team still decides what the rules should be. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 6.3K installs and passing results from three security audits at the time of the scan.…
Highlights
- PreToolUse hook blocks bypass flags
- Blocks --no-verify on commits, pushes and merges
- Blocks --no-gpg-sign on commits
- Keeps pre-commit checks in force for agents
- Setup for Claude Code and similar agents
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate block-no-verify-hook.
People also visit
Claude Code Infrastructure Showcase
by diet103 - A remarkably innovative approach to working
block-no-verify-hook FAQ
What problem does this solve?
AI agents sometimes run git commands with --no-verify and similar flags, which skip the pre-commit checks a team relies on.
How does the hook work?
A PreToolUse hook checks each tool call before it runs and rejects any call containing a bypass flag.
Which flags are blocked?
The skill describes --no-verify on commit, push and merge, and --no-gpg-sign on commits, along with other bypass flags.
Which agents does it work with?
The skill is written for Claude Code and similar agents that run shell commands, including Codex.
How do I install it?
Run npx skills add https://github.com/wshobson/agents --skill block-no-verify-hook, then have the agent configure the hook in your project.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best block-no-verify-hook alternatives?
Popular alternatives to block-no-verify-hook include git-guardrails-claude-code, Claude Code Infrastructure Showcase and code-review. See all block-no-verify-hook alternatives