Show or change Peephole's enforcement mode (guided (default), audit, strict, hardened, off). Use when the user says /peephole, wants to see the current security mode, or asks to make enforcement stricter or looser.
The English summary is being prepared. Showing the original description.
Run score Not tested
See how to installReview the instructions the agent will receive before you install.
Peephole is a plugin for coding agents: it steers the write and can ask or deny before a file is saved. Modes:
enforce CWEs and self-protection still deny.Raising enforcement (to strict or hardened) can be done from the shell:
sh "$CLAUDE_PLUGIN_ROOT/hooks/peephole.sh" mode strict
Lowering enforcement (to audit or off) is a human-only action — peephole
denies a model-issued mode off/mode audit command as a self-protection
measure. To lower it, the user types the whole message /peephole off (or
audit), which the UserPromptSubmit hook applies directly. This prevents the
assistant from waiving the gate on its own.
Run /sec-audit (see the sec-audit skill), which prints the current mode, decision tally, and log-chain integrity.
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Print Peephole's security audit report for this project — current mode, binary integrity, the CWE-mapped decision tally, sec-debt items needing approval, and tamper-evident log-chain status. Use when the user says /sec-audit or asks what Peephole has blocked or flagged.
The English summary is being prepared. Showing the original description.
Explain and list Peephole sec-debt markers — deliberate, human-authorized security trade-offs recorded in code. Use when the user says /sec-debt, wants to knowingly accept a security finding, or asks what deferred security items exist.
The English summary is being prepared. Showing the original description.
Review the current changes for the CWE classes Peephole enforces, as a checklist including the absence-of-guard classes regexes cannot catch. Use when the user says /sec-review or asks for a security review of recent code before committing.
The English summary is being prepared. Showing the original description.