block-no-verify-hook

1# Block No-Verify Hook
2 
3PreToolUse hook configuration that intercepts and blocks bypass-flag usage before execution, ensuring AI agents cannot skip pre-commit hooks, GPG signing, or other git safety mechanisms.
4 
5## Overview
6 
7AI coding agents (Claude Code, Codex, etc.) can run shell commands with flags like `--no-verify` that bypass pre-commit hooks. This defeats the purpose of linting, formatting, testing, and security checks configured in pre-commit hooks. The block-no-verify hook adds a PreToolUse guard that rejects any tool call containing bypass flags before execution.
8 
9## Problem
10 
11When AI agents commit code, they may use bypass flags to avoid hook failures:
12 
13```bash
14# These commands skip pre-commit hooks entirely
15git commit --no-verify -m "quick fix"
16git push --no-verify
17git commit --no-gpg-sign -m "unsigned commit"
18git merge --no-verify feature-branch
19```
20 
21This allows:
22- Unformatted code to enter the repository
23- Linting errors to bypass checks
24- Security scanning to be skipped
25- Unsigned commits to bypass signing policies
26- Test suites to be circumvented
27 
28## Solution
29 
30Add a `PreToolUse` hook to `.claude/settings.json` that inspects every Bash tool call and blocks commands containing bypass flags.
31 
32### Configuration
33 
34Add the following to your project's `.claude/settings.json`:
35 
36```json
37{
38  "hooks": {
39    "PreToolUse": [
40      {
41        "matcher": "Bash",
42        "hooks": [
43          {
44            "type": "command",
45…