compound-bash

Auto-approve compound bash commands when every sub-command matches your allow rules

CLEARED_STATICclaude-onlyv0.9.10

Pipeline results

Coverage

CLEARED_STATIC

Tests run

7 / 8

Portability

Claude-only

Type

Plugins

Tests & results

What the pipeline checked

TestStateResult or reason

eligibilityranall eligibility checks passed

dedupranunique -- no near-duplicate found

clocran4237 code lines / 30 files

secretsranno secret patterns matched

egressranno egress patterns matched

injectionranno patterns matched (confidence: STANDARD)

required-fieldsranrequired fields present: name, version, description

behaviouraln/anot reached — prior gate did not pass

Coverage

Not assessed

behavioural execution not run

README

From the repository

# claude-compound-bash

A Claude Code [PreToolUse hook](https://code.claude.com/docs/en/hooks) that auto-approves a Bash tool call when every command inside it -- including the ones Claude Code's own permission check doesn't look at -- is already covered by your rules or is known-safe. Fewer prompts on compound and wrapped commands, without loosening a single rule.

## What Claude Code already does -- and what this adds

Recent Claude Code versions handle much of this natively. This hook is designed to *complement* that, not duplicate it:

**Native already covers** (so this hook stays out of the way -- it emits no decision and lets native handle it):
- **Compound splitting** -- `git add -A && git commit -m 'fix'` is approved when both halves match. Native splits on `&&`, `||`, `;`, `|`, `|&`, `&`, and newlines. (This is [anthropics/claude-code#16561](https://github.com/anthropics/claude-code/issues/16561), now shipped -- the original reason this plugin existed.)
- **A read-only allowlist** -- `ls`, `cat`, `grep`, `find`, `wc`, read-only `git`, etc. run without a prompt.
- **Process-wrapper stripping** -- a rule for the inner command also matches `timeout`, `time`, `nice`, `nohup`, …

← Back to Plugins