AgentStack
SKILL verified MIT Self-run

Dot Claude

skill-cogni-ai-ou-cogni-ai-agent-skills-dot-claude · by Cogni-AI-OU

Configure and manage Claude Code (.claude) workspace settings, permissions, and tool hooks.

No reviews yet
0 installs
13 views
0.0% view→install

Install

$ agentstack add skill-cogni-ai-ou-cogni-ai-agent-skills-dot-claude

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Dot Claude? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

dot-claude

When to Use

  • Configuring allowed tools and bash permissions for Claude Code.
  • Defining PreToolUse or PostToolUse hooks for specific commands or file edits.
  • Setting up environment variables or enabling LSP plugins for Claude Code.
  • Analyzing or updating the .claude/settings.json workspace configuration.

When Not to Use

  • When working with the Anthropic Claude API or Claude documentation.
  • When configuring generic coding standard rules instead of Claude-specific behavior.

Core Process

  1. Locate or Create Configuration: Ensure the .claude directory exists at the root of the project.
  2. Define Permissions: Use .claude/settings.json to explicitly allow specific Bash commands to prevent Claude Code from blocking them.
  3. Configure Hooks: Set up PreToolUse or PostToolUse hooks in settings.json to enforce safety checks, trigger auto-formatting, or log activity.
  4. Set Environment & Plugins: Enable required tools like language servers (pyright-lsp) or specify environment variables.

Best Practices

  • Explicit Permissions: Instead of granting broad permissions, use precise glob patterns (e.g., Bash(uv tool *)).
  • Hook Activity Logging: Redirect output from hooks into a specific log file like .claude/hook-activity.log to trace tool side effects.
  • Fail-Safe Hooks: Ensure PreToolUse hooks return appropriate exit codes (e.g., exit 2) to block destructive commands.

Common Pitfalls

  • JSON Syntax Errors: settings.json must be strictly valid JSON, without trailing commas or comments.
  • Overly Broad Matchers: Be precise with matcher regex in hooks to avoid triggering scripts unnecessarily (e.g., Edit|Write vs just Bash).

References

  • [Example settings.json](references/vojay-dev/settings.json)

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.