Add one-command security tools setup and pre-push scanning

[John-David Dalton (jdalton)]

What this adds

/setup-security-tools command

One command to download and configure all three security tools:

• AgentShield — scans Claude config for prompt injection/secrets
• Zizmor — static analysis for GitHub Actions workflows
• SFW (Socket Firewall) — intercepts package manager commands to block malware

Prompts for a Socket API key (enterprise features), downloads binaries with SHA-256 verification, creates PATH shims (bash + Windows .cmd).

Pre-push scanning

Adds AgentShield + zizmor blocking scans to the pre-push hook. Every push is automatically checked.

Files

• .claude/hooks/setup-security-tools/ — setup script + README
• .claude/commands/setup-security-tools.md — the slash command
• .git-hooks/pre-push — updated with security pre-checks
• .claude/skills/security-scan/SKILL.md — cross-references the hook
• .gitignore — tracks hooks and settings

---

Note

Medium Risk
Adds a new mandatory pre-push gate that can block pushes and introduces a script that downloads/executes external binaries (zizmor/SFW), so misconfiguration or platform edge cases could impact developer workflows.

Overview
Introduces a new /setup-security-tools command and accompanying hook that sets up AgentShield, zizmor, and Socket Firewall (SFW) for local use, including SHA-256–verified binary downloads, caching under ~/.socket/, and PATH shims for supported package managers (with optional enterprise mode via SOCKET_API_KEY).

Adds a .git-hooks/pre-push hook that runs AgentShield and zizmor scans and blocks pushes on findings, plus commit-message AI attribution checks and secret/file hygiene checks. Updates .gitignore to allow committing .claude/hooks/ and settings.json, and documents the new setup in the security scan skill/readmes.

^{Reviewed by Cursor Bugbot for commit bf5169b. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 4 potential issues.

Autofix Details

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: SFW free shims disable SSL verification globally
  • Removed the export GIT_SSL_NO_VERIFY=true line and its comment from the sfw-free shim generation code, eliminating the global SSL verification bypass.

Or push these changes by commenting:

@cursor push 6216e6d7db

Preview (6216e6d7db)

diff --git a/.claude/hooks/setup-security-tools/index.mts b/.claude/hooks/setup-security-tools/index.mts
--- a/.claude/hooks/setup-security-tools/index.mts
+++ b/.claude/hooks/setup-security-tools/index.mts
@@ -273,10 +273,6 @@
         'fi',
       )
     }
-    if (!isEnterprise) {
-      // Workaround: sfw-free does not yet set GIT_SSL_CAINFO (temporary).
-      bashLines.push('export GIT_SSL_NO_VERIFY=true')
-    }
     bashLines.push(`exec "${binaryPath}" "${realBin}" "$@"`)
     const bashContent = bashLines.join('\n') + '\n'
     const bashPath = path.join(shimDir, cmd)

_{You can send follow-ups to the cloud agent here.}

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Pre-checks may consume stdin, silently skipping commit validation
  • Added </dev/null to both the agentshield and zizmor command invocations so they cannot consume the git ref data from stdin, ensuring the while-read loop processes all refs.

Or push these changes by commenting:

@cursor push 0fb9c637e2

Preview (0fb9c637e2)

diff --git a/.git-hooks/pre-push b/.git-hooks/pre-push
--- a/.git-hooks/pre-push
+++ b/.git-hooks/pre-push
@@ -27,7 +27,7 @@
 # ============================================================================
 if command -v agentshield >/dev/null 2>&1 || [ -x "$(pnpm bin 2>/dev/null)/agentshield" ]; then
   AGENTSHIELD="$(command -v agentshield 2>/dev/null || echo "$(pnpm bin)/agentshield")"
-  if ! "$AGENTSHIELD" scan --quiet 2>/dev/null; then
+  if ! "$AGENTSHIELD" scan --quiet 2>/dev/null </dev/null; then
     printf "${RED}✗ AgentShield: security issues found in Claude config${NC}\n"
     printf "Run 'pnpm exec agentshield scan' for details\n"
     TOTAL_ERRORS=$((TOTAL_ERRORS + 1))
@@ -44,7 +44,7 @@
   ZIZMOR="$HOME/.socket/zizmor/bin/zizmor"
 fi
 if [ -n "$ZIZMOR" ] && [ -d ".github/" ]; then
-  if ! "$ZIZMOR" .github/ 2>/dev/null; then
+  if ! "$ZIZMOR" .github/ 2>/dev/null </dev/null; then
     printf "${RED}✗ Zizmor: workflow security issues found${NC}\n"
     printf "Run 'zizmor .github/' for details\n"
     TOTAL_ERRORS=$((TOTAL_ERRORS + 1))

_{You can send follow-ups to the cloud agent here.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 2f8e599. Configure here.}

[John-David Dalton (jdalton)]

Cursor (@cursor) review