1class ClaudeCodeHookInterceptor:

2 def intercept_pre_tool_use(self, tool_name: str, tool_input: dict) -> tuple[bool, str]:

3 # Line 3-7: Intercepts dangerous CLI flags that attempt to bypass permissions

4 command = tool_input.get("command", "")

5KEY if tool_name == "Bash":

6KEY for flag in ["--dangerously-skip-permissions", "-y", "--force-all"]:

7 if flag in command:

8 return False, f"CLI flag '{flag}' prohibited by policy."

9 return True, "PreToolUse check passed."

10

11 @classmethod

12KEY def permission_output(cls, decision: str, reason: str) -> dict:

13KEY # Line 12-16: Emits standard Claude Code PreToolUse JSON schema

14KEY return {"hookSpecificOutput": {

15KEY "hookEventName": "PreToolUse",

16 "permissionDecision": decision, # 'allow' | 'deny' | 'ask' | 'defer'

17 "permissionDecisionReason": reason,

18 }}

19

20class GuardrailsEngine:

21 def audit_ast_and_secrets(self, file_path: str, code_content: str) -> tuple[bool, list[str]]:

22KEY # Line 21-25: Multi-vendor credential scan + AST syntax parser

23KEY ast.parse(code_content, filename=file_path)

24 if re.search(r"(sk-proj-[A-Za-z0-9_\-]{20,}|AKIA[0-9A-Z]{16})", code_content):

25 return False, ["CRITICAL: Hardcoded API secret key detected!"]

26 return True, ["AST syntax valid. Zero secrets."]