Supporting artifacts for a comment on anthropics/claude-code#75245 (PreToolUse hook
if: "Bash(git commit*)" fails open on $() command substitution).
Question tested: asked with no hints to write a hook that logs only git commit
commands, does Claude Code reach for the vulnerable if: pattern and produce a hook
that fires on unrelated commands like echo $(date)?
Result — hooks that spuriously fire on echo $(date) (Claude Code 2.1.233, macOS):
| name | retroencabulator |
|---|---|
| description | Turbo-encabulator technobabble — every meaningful term replaced with prefabulated amulite nonsense, in the grand tradition of Rockwell Automation |
| keep-coding-instructions | true |
All prose output must be rendered in the register of a 1988 Rockwell Automation product film about the Retro Encabulator. The reader is a distinguished but unnamed procurement committee. You are the narrator. You are unshakeably confident, faintly bored, and speaking entirely in words that do not mean anything.
| #include <stdio.h> | |
| #include <stdlib.h> | |
| #include <time.h> | |
| void shuffle(int array[], size_t n) { | |
| if (n > 1) { | |
| size_t i; | |
| for (i = n - 1; i > 0; i--) { | |
| size_t j = rand() % (i + 1); | |
| int tmp = array[j]; |
| use enumset::{EnumSet, EnumSetType}; | |
| #[derive(EnumSetType, Debug)] | |
| pub enum Token { | |
| _1, | |
| _2, | |
| _3, | |
| _4, | |
| _5, | |
| _6, |
| https://raw.githubusercontent.com/agrawald/daml-java-bot/0aeb0e8be314172e014f57dff584e4dd7cae4a6b/daml/Iou.daml | |
| https://raw.githubusercontent.com/agrawald/daml-java-bot/0aeb0e8be314172e014f57dff584e4dd7cae4a6b/daml/IouTrade.daml | |
| https://raw.githubusercontent.com/agrawald/daml-java-bot/0aeb0e8be314172e014f57dff584e4dd7cae4a6b/daml/Main.daml | |
| https://raw.githubusercontent.com/agrawald/daml-java-bot/0aeb0e8be314172e014f57dff584e4dd7cae4a6b/daml/Tests/Iou.daml | |
| https://raw.githubusercontent.com/agrawald/daml-java-bot/0aeb0e8be314172e014f57dff584e4dd7cae4a6b/daml/Tests/Trade.daml | |
| https://raw.githubusercontent.com/aherrmann/drml/02b8eb4fd5fce390dfb8d646cf14b58d1da31ef0/daml/drml/Iou.daml | |
| https://raw.githubusercontent.com/aherrmann/drml/4e5e87ded935d0f77bdface0ae9f7b3f6d853059/daml/drml/Book.daml | |
| https://raw.githubusercontent.com/aherrmann/drml/bd25202f3a97c276e780e46fa2ef551f5c3fc8e6/daml/drml/Bankruptcy.daml | |
| https://raw.githubusercontent.com/akshlawange/DAH/f9cce255aa3dc72eff0d51fe16aaa7e5c1fc63b3/daml/Main/Cash.dam |
| public interface Animal { | |
| String salutation(); | |
| } |
| FROM python:2.7-jessie | |
| LABEL maintainer="Teralytics AG" | |
| LABEL version=1 | |
| # Mesos-related image build-time arguments | |
| ARG MESOS_VERSION=1.0.1 | |
| ARG MESOS_VERSION_QUALIFIER=2.0.93.debian81 | |
| # Airflow-related image build-time arguments | |
| ARG AIRFLOW_VERSION=1.8.1 |
| object Person { | |
| def unapply(arg: Person): Option[(String, Int, Boolean)] = | |
| Some(arg.name, arg.age, arg.valid) | |
| } | |
| trait Person { | |
| def name: String | |
| def age: Int | |
| def valid: Boolean | |
| } |
| Welcome to Scala 2.11.8 (OpenJDK 64-Bit Server VM, Java 1.8.0_131). | |
| Type in expressions for evaluation. Or try :help. | |
| scala> :paste | |
| // Entering paste mode (ctrl-D to finish) | |
| import scala.concurrent.Future | |
| import scala.concurrent.ExecutionContext.Implicits.global | |
| class RequestType {} |
| ProblemType: Crash | |
| Architecture: amd64 | |
| CrashCounter: 1 | |
| CurrentDesktop: Unity:Unity7 | |
| Date: Wed Jun 14 13:29:19 2017 | |
| DistroRelease: Ubuntu 17.04 | |
| ExecutablePath: /usr/lib/pony/0.14.0-3301.681301f/bin/ponyc | |
| ExecutableTimestamp: 1494067046 | |
| ProcCmdline: ponyc - main.pony | |
| ProcCwd: /home/ste/Projects/stefanobaghino/pony-playground |