file-protection

Protect critical files from accidental modification

Event Configuration

• Event Type: PreToolUse
• Tool Matcher: Edit|MultiEdit|Write
• Category: security

Environment Variables

• CLAUDE_TOOL_FILE_PATH

Requirements

None

Script

file_path=$(jq -r '.tool_input.file_path // empty')
protected_patterns=('.env' 'package-lock.json' '.git/' 'node_modules/')
for pattern in "${protected_patterns[@]}"; do
  if [[ "$file_path" == *"$pattern"* ]]; then
    echo "Blocked: Cannot modify protected file: $file_path" >&2
    exit 2
  fi
done
exit 0