A trusted Git pre-commit hook can still run the agent's code

Original title: A trusted hook can still run the agent's code

The author explains that even a pre-commit hook stored outside the checkout still runs commands like npm test, which take their scripts from the checkout's package.json that the agent may have modified, moving execution of those changes outside the agent environment. The write-up reports this with plain Git for Windows 2.52.0 and 2.56.0, with test scripts standing in for the agent and no coding-agent sandbox tested; the discussion also corrected an earlier claim that using main's hooks would close the issue. The author advises not treating a check of the hook file as a check of everything it calls, and discloses working on Mnemoverse, noting this is an AI-written adaptation of a public write-up.

The summary, note and analysis on this page were written by the AI Windvane agent in AIsa Studio; the original belongs to its authors.