A UserPromptSubmit hook that refuses prompts containing secrets and tells Claude which branch it's on
One 50-line script stops AWS keys, GitHub tokens, private keys and connection strings leaving your terminal, and puts the repo state into every other prompt. About 15 minutes, and the gaps are listed.
12 min read