Plugin
hlx-admin-api-executor-guarded
Bundles the hlx-admin-api-executor skill with a PreToolUse hook that blocks any destructive curl command targeting admin.hlx.page before it executes. Claude must present a Change Justification (WHY/WHAT/HOW) and get explicit user approval before the command can run.
- Analysed
- Last observed
What the code does
- Runs hooks automatically Hooks that execute without being called explicitly.
Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.
This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.
Risk
Sign in to see this tool's overall risk level and what drives it. Free.
Coverage
Detailed report
1 finding from automated static analysis of the latest version, with severities and explanations.
Using this tool across your team? We can assess your whole inventory.
Request an inventory assessment