cc-safe-setup 29.8.0 → 30.0.5

package/.claude-plugin/marketplace.json

@@ -5,7 +5,7 @@
     "email": "yurukusa@users.noreply.github.com"
   },
   "metadata": {
-    "description": "Safety hooks for Claude Code — 688 battle-tested hooks from 800+ hours of autonomous operation. Prevents rm -rf, force-push, credential leaks, unauthorized fund transfers, deny-rules bypass, and more.",
+    "description": "Safety hooks for Claude Code, from 800+ hours of autonomous operation. Four plugins that block rm -rf, force-push, hard reset, credential leaks, and runaway token spend. The companion CLI ships 908 further example hooks.",
     "version": "1.0.0",
     "pluginRoot": "./plugins"
   },
@@ -14,53 +14,106 @@
       "name": "safety-essentials",
       "source": "./plugins/safety-essentials",
       "description": "5 essential safety hooks: block rm -rf, force-push, hard-reset, env overwrites, and package publish. The minimum viable safety net.",
-      "version": "1.0.0",
-      "author": { "name": "yurukusa" },
+      "version": "1.2.0",
+      "author": {
+        "name": "yurukusa"
+      },
       "homepage": "https://yurukusa.github.io/cc-safe-setup/",
       "repository": "https://github.com/yurukusa/cc-safe-setup",
       "license": "MIT",
-      "keywords": ["safety", "hooks", "rm-rf", "force-push", "env", "essential"],
+      "keywords": [
+        "safety",
+        "hooks",
+        "rm-rf",
+        "force-push",
+        "env",
+        "essential"
+      ],
       "category": "safety",
-      "tags": ["beginner-friendly", "must-have", "pretooluse"]
+      "tags": [
+        "beginner-friendly",
+        "must-have",
+        "pretooluse"
+      ]
     },
     {
       "name": "git-protection",
       "source": "./plugins/git-protection",
-      "description": "Git safety hooks: block force-push, protect main/master, prevent hard-reset, guard rebase, and auto-backup before destructive operations.",
-      "version": "1.0.0",
-      "author": { "name": "yurukusa" },
+      "description": "Git safety hooks: block force-push, protect main/master, prevent hard reset, guard interactive rebase, and block git clean -fd.",
+      "version": "1.2.0",
+      "author": {
+        "name": "yurukusa"
+      },
       "homepage": "https://yurukusa.github.io/cc-safe-setup/",
       "repository": "https://github.com/yurukusa/cc-safe-setup",
       "license": "MIT",
-      "keywords": ["git", "force-push", "main-branch", "reset", "rebase", "backup"],
+      "keywords": [
+        "git",
+        "force-push",
+        "main-branch",
+        "reset",
+        "rebase",
+        "backup"
+      ],
       "category": "safety",
-      "tags": ["git", "version-control", "pretooluse"]
+      "tags": [
+        "git",
+        "version-control",
+        "pretooluse"
+      ]
     },
     {
       "name": "credential-guard",
       "source": "./plugins/credential-guard",
       "description": "Protect secrets and credentials: block writes to .env files, detect API keys in commands, prevent hardcoded tokens, guard service account files.",
-      "version": "1.0.0",
-      "author": { "name": "yurukusa" },
+      "version": "1.2.0",
+      "author": {
+        "name": "yurukusa"
+      },
       "homepage": "https://yurukusa.github.io/cc-safe-setup/",
       "repository": "https://github.com/yurukusa/cc-safe-setup",
       "license": "MIT",
-      "keywords": ["credentials", "secrets", "api-keys", "env", "tokens", "security"],
+      "keywords": [
+        "credentials",
+        "secrets",
+        "api-keys",
+        "env",
+        "tokens",
+        "security"
+      ],
       "category": "security",
-      "tags": ["credentials", "secrets", "pretooluse"]
+      "tags": [
+        "credentials",
+        "secrets",
+        "pretooluse"
+      ]
     },
     {
       "name": "token-guard",
       "source": "./plugins/token-guard",
-      "description": "Token consumption guards: large-read warning (100KB+), read budget limit, subagent cap, and token budget tracking. Reduce waste by 20-40%.",
-      "version": "1.0.0",
-      "author": { "name": "yurukusa" },
+      "description": "Token consumption guards: large-read warning (100KB+), per-session read budget, subagent cap, and a token budget that asks for /compact.",
+      "version": "1.1.0",
+      "author": {
+        "name": "yurukusa"
+      },
       "homepage": "https://yurukusa.github.io/cc-safe-setup/token-book.html",
       "repository": "https://github.com/yurukusa/cc-safe-setup",
       "license": "MIT",
-      "keywords": ["tokens", "cost", "budget", "optimization", "large-read", "subagent"],
+      "keywords": [
+        "tokens",
+        "cost",
+        "budget",
+        "optimization",
+        "large-read",
+        "subagent"
+      ],
       "category": "optimization",
-      "tags": ["token-saving", "cost-reduction", "pretooluse", "posttooluse"]
+      "tags": [
+        "token-saving",
+        "cost-reduction",
+        "pretooluse",
+        "posttooluse"
+      ]
     }
   ]
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "description": "665 safety hooks for Claude Code — prevent file deletion, credential leaks, git disasters, and token waste during autonomous AI coding sessions",
+  "description": "909 safety hooks for Claude Code — prevent file deletion, credential leaks, git disasters, and token waste during autonomous AI coding sessions",
   "version": "30.0.0",
   "author": {
     "name": "yurukusa"

package/CONTRIBUTING.md

@@ -67,7 +67,12 @@ npx cc-hook-test examples/your-hook.sh
 
 ## Code Style
 
-- Bash hooks (not Python/Node) for zero dependencies
-- `jq` for JSON parsing
+- Bash hooks (not Python/Node), so nothing is pulled from npm
+- A hook still needs a JSON reader for its stdin. These two lines used to read "zero
+  dependencies" and "`jq` for JSON parsing" — which contradict each other, since `jq` is a
+  dependency. Prefer the core hooks' chain: try `jq`, then `python3`, then `node`, and if none
+  is present, **warn that the hook is not protecting the user** and exit 0. Silently reading an
+  empty command is the failure mode to avoid: the hook stays listed in `settings.json` and
+  guards nothing. `tests/core-scripts-parser-fallback.test.sh` covers this.
 - Short variable names are fine (`CMD`, `FILE`, `INPUT`)
 - Comments explain *why*, not *what*

package/COOKBOOK.md

@@ -6,64 +6,64 @@ Real-world recipes for common safety scenarios. Each recipe is a single command.
 
 | I want to... | Command |
 |---|---|
-| Install basic safety | `npx cc-safe-setup` |
-| Maximum protection | `npx cc-safe-setup --shield` |
-| Check my setup | `npx cc-safe-setup --doctor` |
-| See my safety score | `npx cc-safe-setup --audit` |
+| Install basic safety | `npx github:yurukusa/cc-safe-setup` |
+| Maximum protection | `npx github:yurukusa/cc-safe-setup --shield` |
+| Check my setup | `npx github:yurukusa/cc-safe-setup --doctor` |
+| See my safety score | `npx github:yurukusa/cc-safe-setup --audit` |
 
 ## Blocking Dangerous Commands
 
 ### Block rm -rf on home/root
 Already included in the default install. To verify:
 ```bash
-npx cc-safe-setup --simulate "rm -rf ~"
+npx github:yurukusa/cc-safe-setup --simulate "rm -rf ~"
 # Expected: BLOCKED
 ```
 
 ### Block database wipes
 ```bash
-npx cc-safe-setup --install-example block-database-wipe
+npx github:yurukusa/cc-safe-setup --install-example block-database-wipe
 ```
 Blocks: `prisma migrate reset`, `rails db:drop`, `DROP TABLE`, etc.
 
 ### Block npm publish accidents
 ```bash
-npx cc-safe-setup --install-example npm-publish-guard
+npx github:yurukusa/cc-safe-setup --install-example npm-publish-guard
 ```
 
 ## Auto-Approving Safe Commands
 
 ### Approve read-only commands (cat, ls, grep)
 ```bash
-npx cc-safe-setup --install-example auto-approve-readonly
+npx github:yurukusa/cc-safe-setup --install-example auto-approve-readonly
 ```
 
 ### Approve test runners
 ```bash
-npx cc-safe-setup --install-example auto-approve-test
+npx github:yurukusa/cc-safe-setup --install-example auto-approve-test
 ```
 Covers: `npm test`, `pytest`, `go test`, `cargo test`, `jest`, `vitest`
 
 ### Approve git read commands (status, log, diff)
 ```bash
-npx cc-safe-setup --install-example auto-approve-git-read
+npx github:yurukusa/cc-safe-setup --install-example auto-approve-git-read
 ```
 
 ## File Protection
 
 ### Protect .env files from edits
 ```bash
-npx cc-safe-setup --protect .env
+npx github:yurukusa/cc-safe-setup --protect .env
 ```
 
 ### Protect CLAUDE.md from unauthorized changes
 ```bash
-npx cc-safe-setup --install-example protect-claudemd
+npx github:yurukusa/cc-safe-setup --install-example protect-claudemd
 ```
 
 ### Protect dotfiles (~/.bashrc, ~/.aws/)
 ```bash
-npx cc-safe-setup --install-example protect-dotfiles
+npx github:yurukusa/cc-safe-setup --install-example protect-dotfiles
 ```
 
 ## YAML Rules (No Coding)
@@ -82,47 +82,47 @@ Write rules in YAML, compile to hooks:
 ```
 
 ```bash
-npx cc-safe-setup --rules rules.yaml
+npx github:yurukusa/cc-safe-setup --rules rules.yaml
 ```
 
 ## Monitoring & Recovery
 
 ### Auto-save checkpoint before compaction
 ```bash
-npx cc-safe-setup --install-example auto-compact-prep
+npx github:yurukusa/cc-safe-setup --install-example auto-compact-prep
 ```
 
 ### Track context window usage
 ```bash
-npx cc-safe-setup --install-example compact-reminder
+npx github:yurukusa/cc-safe-setup --install-example compact-reminder
 ```
 
 ### Fix hook permissions on Windows/plugins
 ```bash
-npx cc-safe-setup --install-example hook-permission-fixer
+npx github:yurukusa/cc-safe-setup --install-example hook-permission-fixer
 ```
 
 ### Prevent tool call loops
 ```bash
-npx cc-safe-setup --install-example response-budget-guard
+npx github:yurukusa/cc-safe-setup --install-example response-budget-guard
 ```
 
 ## Diagnosing Problems
 
 ### Why isn't my hook working?
 ```bash
-npx cc-safe-setup --doctor
+npx github:yurukusa/cc-safe-setup --doctor
 ```
 Checks: jq, settings.json, file existence, permissions, shebangs, exit codes.
 
 ### Test a specific hook
 ```bash
-npx cc-safe-setup --test-hook destructive-guard
+npx github:yurukusa/cc-safe-setup --test-hook destructive-guard
 ```
 
 ### Preview how hooks react to a command
 ```bash
-npx cc-safe-setup --simulate "git push --force origin main"
+npx github:yurukusa/cc-safe-setup --simulate "git push --force origin main"
 ```
 
 ## Web Tools
@@ -140,7 +140,7 @@ All browser-based, nothing leaves your machine:
 PreToolUse hooks can't bypass built-in protected-directory checks — they run *before* those checks. Use PermissionRequest instead:
 
 ```bash
-npx cc-safe-setup --install-example allow-git-hooks-dir
+npx github:yurukusa/cc-safe-setup --install-example allow-git-hooks-dir
 ```
 
 Or manually: create a PermissionRequest hook that outputs `permissionDecision: "allow"`. See [Troubleshooting](TROUBLESHOOTING.md#pretooluse-allow-doesnt-bypass-protected-directory-prompts) for details.
@@ -150,7 +150,7 @@ Or manually: create a PermissionRequest hook that outputs `permissionDecision: "
 Block credential hunting commands (env scanning, file searches for tokens):
 
 ```bash
-npx cc-safe-setup --install-example credential-exfil-guard
+npx github:yurukusa/cc-safe-setup --install-example credential-exfil-guard
 ```
 
 Blocks: `env | grep -i token`, `find / -name *.pem`, `cat ~/.ssh/id_rsa`, `cat ~/.aws/credentials`.
@@ -160,17 +160,21 @@ Blocks: `env | grep -i token`, `find / -name *.pem`, `cat ~/.ssh/id_rsa`, `cat ~
 Add a second layer of rm protection beyond destructive-guard:
 
 ```bash
-npx cc-safe-setup --install-example rm-safety-net
+npx github:yurukusa/cc-safe-setup --install-example rm-safety-net
 ```
 
 Blocks rm -rf on any non-safe path (only allows node_modules, dist, build, /tmp, __pycache__).
+Also blocks `find ... | xargs rm` when the null-delimited pair `find -print0 | xargs -0` is
+missing — without it, a path with spaces (`./Google Photos/a.jpg`) splits into two targets and
+`rm -rf` can wipe an unrelated directory (#69793). Use `find -delete`, `find -exec rm {} +`, or
+`find -print0 | xargs -0 rm`.
 
 ## Auto Mode False Positive Fix
 
 Stop the safety classifier from blocking read-only commands:
 
 ```bash
-npx cc-safe-setup --install-example auto-mode-safe-commands
+npx github:yurukusa/cc-safe-setup --install-example auto-mode-safe-commands
 ```
 
 Auto-approves: cat, grep, git status, ls, find, jq, curl GET, echo.
@@ -180,7 +184,7 @@ Auto-approves: cat, grep, git status, ls, find, jq, curl GET, echo.
 Stop permission prompts for `cd /path && git log`:
 
 ```bash
-npx cc-safe-setup --install-example compound-command-allow
+npx github:yurukusa/cc-safe-setup --install-example compound-command-allow
 ```
 
 Splits compound commands and checks each component. Approves when all are safe.
@@ -190,7 +194,7 @@ Splits compound commands and checks each component. Approves when all are safe.
 Block secrets from being written into source files:
 
 ```bash
-npx cc-safe-setup --install-example write-secret-guard
+npx github:yurukusa/cc-safe-setup --install-example write-secret-guard
 ```
 
 Detects AWS, GitHub, OpenAI, Anthropic, Slack, Stripe, Google keys + PEM + database URLs. Allows .env.example and test files.
@@ -200,7 +204,7 @@ Detects AWS, GitHub, OpenAI, Anthropic, Slack, Stripe, Google keys + PEM + datab
 Log every tool call for debugging permission rules:
 
 ```bash
-npx cc-safe-setup --install-example permission-audit-log
+npx github:yurukusa/cc-safe-setup --install-example permission-audit-log
 ```
 
 Writes JSONL to `~/.claude/tool-usage.jsonl`. Analyze with `cat ~/.claude/tool-usage.jsonl | jq -s 'group_by(.tool) | map({tool: .[0].tool, count: length})'`.
@@ -210,7 +214,7 @@ Writes JSONL to `~/.claude/tool-usage.jsonl`. Analyze with `cat ~/.claude/tool-u
 Auto-approve read-only commands when Auto Mode's classifier is unavailable:
 
 ```bash
-npx cc-safe-setup --install-example classifier-fallback-allow
+npx github:yurukusa/cc-safe-setup --install-example classifier-fallback-allow
 ```
 
 PermissionRequest hook that approves cat, ls, grep, git read-only when the classifier can't respond.
@@ -220,7 +224,7 @@ PermissionRequest hook that approves cat, ls, grep, git read-only when the class
 Prevent the agent from displaying tokens in conversations by reading package manager credential files:
 
 ```bash
-npx cc-safe-setup --install-example credential-file-cat-guard
+npx github:yurukusa/cc-safe-setup --install-example credential-file-cat-guard
 ```
 
 Blocks `cat`, `head`, `tail`, `grep` on `~/.netrc`, `~/.npmrc`, `~/.cargo/credentials`, `~/.docker/config.json`, `~/.kube/config`, and more. Complements `credential-exfil-guard` which blocks hunting patterns. See [#34819](https://github.com/anthropics/claude-code/issues/34819).
@@ -230,8 +234,8 @@ Blocks `cat`, `head`, `tail`, `grep` on `~/.netrc`, `~/.npmrc`, `~/.cargo/creden
 Block `git push` to protected branches unless tests have passed in the current session:
 
 ```bash
-npx cc-safe-setup --install-example push-requires-test-pass
-npx cc-safe-setup --install-example push-requires-test-pass-record
+npx github:yurukusa/cc-safe-setup --install-example push-requires-test-pass
+npx github:yurukusa/cc-safe-setup --install-example push-requires-test-pass-record
 ```
 
 Two-hook system: the PostToolUse `record` hook detects successful test runs (`npm test`, `pytest`, `cargo test`, etc.) and saves a timestamp. The PreToolUse hook blocks push to main/master/production if no recent test pass exists (30-minute window). See [#36673](https://github.com/anthropics/claude-code/issues/36673).
@@ -239,9 +243,9 @@ Two-hook system: the PostToolUse `record` hook detects successful test runs (`np
 ## Recipe: Protect CI/CD Pipelines
 
 ```bash
-npx cc-safe-setup --install-example github-actions-secret-guard
-npx cc-safe-setup --install-example ci-workflow-guard
-npx cc-safe-setup --install-example gitops-drift-guard
+npx github:yurukusa/cc-safe-setup --install-example github-actions-secret-guard
+npx github:yurukusa/cc-safe-setup --install-example ci-workflow-guard
+npx github:yurukusa/cc-safe-setup --install-example gitops-drift-guard
 ```
 
 Three-hook system: `github-actions-secret-guard` (PostToolUse) detects hardcoded secrets in workflow files. `ci-workflow-guard` (PostToolUse) flags `--no-verify`, remote script execution, and broad write permissions. `gitops-drift-guard` (PreToolUse) warns when editing infrastructure files on protected branches.
@@ -249,7 +253,7 @@ Three-hook system: `github-actions-secret-guard` (PostToolUse) detects hardcoded
 ## Recipe: Kubernetes Production Safety
 
 ```bash
-npx cc-safe-setup --install-example k8s-production-guard
+npx github:yurukusa/cc-safe-setup --install-example k8s-production-guard
 # Set production contexts/namespaces:
 export CC_K8S_PROD_CONTEXTS="prod:production"
 export CC_K8S_PROD_NAMESPACES="production:prod"
@@ -260,8 +264,8 @@ Blocks `kubectl delete`, `scale --replicas=0`, `drain`, and `helm uninstall` on
 ## Recipe: MCP Server Allowlist
 
 ```bash
-npx cc-safe-setup --install-example mcp-server-allowlist
-npx cc-safe-setup --install-example mcp-tool-audit-log
+npx github:yurukusa/cc-safe-setup --install-example mcp-server-allowlist
+npx github:yurukusa/cc-safe-setup --install-example mcp-tool-audit-log
 export CC_MCP_ALLOWED="github:filesystem:memory"
 ```
 
@@ -270,7 +274,7 @@ Only allows MCP tool calls from whitelisted servers. Blocks calls from unknown/s
 ## Recipe: Role-Based Agent Teams
 
 ```bash
-npx cc-safe-setup --install-example role-tool-guard
+npx github:yurukusa/cc-safe-setup --install-example role-tool-guard
 echo "pm" > .claude/current-role.txt
 ```
 
@@ -281,7 +285,7 @@ Restricts tools based on agent role. PM can only read and delegate (no Edit/Writ
 Claude Code frequently runs `git show <ref> --no-stat`, which fails because `--no-stat` is not a valid git-show flag. This wastes context on error output. The hook silently rewrites the command.
 
 ```bash
-npx cc-safe-setup --install-example git-show-flag-sanitizer
+npx github:yurukusa/cc-safe-setup --install-example git-show-flag-sanitizer
 ```
 
 Install in `.claude/settings.json` as a PreToolUse hook with matcher `Bash`. The hook detects `git show` + `--no-stat`, strips the invalid flag, and returns the corrected command via `updatedInput`. See [#13071](https://github.com/anthropics/claude-code/issues/13071).
@@ -292,10 +296,10 @@ If your Max Plan 5-hour limit is exhausting too fast, install these two hooks to
 
 ```bash
 # Log every prompt with timestamps
-npx cc-safe-setup --install-example prompt-usage-logger
+npx github:yurukusa/cc-safe-setup --install-example prompt-usage-logger
 
 # Alert when auto-compaction fires
-npx cc-safe-setup --install-example compact-alert-notification
+npx github:yurukusa/cc-safe-setup --install-example compact-alert-notification
 ```
 
 After a session, check `/tmp/claude-usage-log.txt` for prompt frequency and `/tmp/claude-compact-log.txt` for compaction count. If you see 3+ compactions per session, the compact-rebuild cycle is a major token sink — use manual `/compact` before the threshold.
@@ -307,7 +311,7 @@ Quick wins: reduce MCP servers (`claude mcp list`), use `offset`/`limit` on larg
 Back up session JSONL files on every start (protects against silent deletion):
 
 ```bash
-npx cc-safe-setup --install-example session-backup-on-start
+npx github:yurukusa/cc-safe-setup --install-example session-backup-on-start
 ```
 
 Keeps last 5 timestamped backups in `~/.claude/session-backups/`. Restore with `cp`. See [#41874](https://github.com/anthropics/claude-code/issues/41874).
@@ -315,7 +319,7 @@ Keeps last 5 timestamped backups in `~/.claude/session-backups/`. Restore with `
 Back up the full transcript before compaction (protects against rate-limit data loss):
 
 ```bash
-npx cc-safe-setup --install-example pre-compact-transcript-backup
+npx github:yurukusa/cc-safe-setup --install-example pre-compact-transcript-backup
 ```
 
 Keeps last 3 backups in `~/.claude/compact-backups/`. If compaction fails and your transcript is corrupted, restore from the backup. See [#40352](https://github.com/anthropics/claude-code/issues/40352).
@@ -325,7 +329,7 @@ Keeps last 3 backups in `~/.claude/compact-backups/`. If compaction fails and yo
 Power users who manage context manually can block auto-compaction entirely:
 
 ```bash
-npx cc-safe-setup --install-example compact-blocker
+npx github:yurukusa/cc-safe-setup --install-example compact-blocker
 ```
 
 Install as a PreCompact hook (no matcher needed). Exit code 2 blocks compaction. For conditional control, add a guard: `[ -f /tmp/allow-compact ] && exit 0`. See [#6689](https://github.com/anthropics/claude-code/issues/6689).
@@ -335,7 +339,7 @@ Install as a PreCompact hook (no matcher needed). Exit code 2 blocks compaction.
 `WebFetch(domain:*)` in settings.json fails in sandbox mode. This hook auto-approves WebFetch requests by domain:
 
 ```bash
-npx cc-safe-setup --install-example webfetch-domain-allow
+npx github:yurukusa/cc-safe-setup --install-example webfetch-domain-allow
 ```
 
 Install as a PreToolUse hook with matcher `WebFetch`. By default allows all domains. Set `CC_WEBFETCH_ALLOW_DOMAINS=github.com,docs.anthropic.com` for specific domains. See [#9329](https://github.com/anthropics/claude-code/issues/9329).

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 yurukusa
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/MIGRATION.md

@@ -18,7 +18,7 @@ Permissions are binary: allow or deny. Hooks are programmable: inspect the comma
 ## Step 1: Audit Your Current Setup
 
 ```bash
-npx cc-safe-setup --audit
+npx github:yurukusa/cc-safe-setup --audit
 ```
 
 This scores your current settings (0-100) and shows what's missing.
@@ -113,7 +113,7 @@ This means you can keep your working `allow` rules and layer hooks on top for th
 ## Step 3: Install Everything Automatically
 
 ```bash
-npx cc-safe-setup
+npx github:yurukusa/cc-safe-setup
 ```
 
 This creates the hook scripts and merges the config into your existing settings.json. Your current `permissions` are preserved.
@@ -121,13 +121,13 @@ This creates the hook scripts and merges the config into your existing settings.
 ## Step 4: Verify
 
 ```bash
-npx cc-safe-setup --verify
+npx github:yurukusa/cc-safe-setup --verify
 ```
 
 Tests each hook with sample inputs. If something fails:
 
 ```bash
-npx cc-safe-setup --doctor
+npx github:yurukusa/cc-safe-setup --doctor
 ```
 
 This checks jq installation, file permissions, shebang lines, and common misconfigurations.
@@ -139,7 +139,7 @@ This checks jq installation, file permissions, shebang lines, and common misconf
 You're trading speed for safety. Keep `Bash(*)` but add hooks to catch the dangerous commands:
 
 ```bash
-npx cc-safe-setup
+npx github:yurukusa/cc-safe-setup
 ```
 
 Now `Bash(*)` auto-approves commands, but hooks still run and block dangerous ones. Best of both worlds.
@@ -207,18 +207,18 @@ echo $?  # Should be 2 (blocked)
 Watch what's being blocked in real time:
 
 ```bash
-npx cc-safe-setup --watch
+npx github:yurukusa/cc-safe-setup --watch
 ```
 
 After a few sessions, generate custom hooks from your block patterns:
 
 ```bash
-npx cc-safe-setup --learn
+npx github:yurukusa/cc-safe-setup --learn
 ```
 
 ## Resources
 
-- [Official Hooks Documentation](https://docs.anthropic.com/en/docs/claude-code/hooks)
+- [Official Hooks Documentation](https://code.claude.com/docs/en/hooks)
 - [COOKBOOK.md](https://github.com/yurukusa/claude-code-hooks/blob/main/COOKBOOK.md) — 19 hook recipes
 - [cc-safe-setup](https://github.com/yurukusa/cc-safe-setup) — automated setup
 - [Web Audit Tool](https://yurukusa.github.io/cc-safe-setup/) — browser-based setup generator