write-hook

Name: write-hook
Author: facebook

Create a Mononoke server-side hook with 3-diff split (tests, wiring, implementation), unit tests, and integration tests

Stars

★ 6,885

Source

GitHub

Updated

2026-06-23

// securityCaution

Prompt only, no code
Open source

Summary

The material indicates a prompt/document-only open-source skill with no required secrets, no declared remote endpoints, and no direct local execution or data-access capability, so the overall risk is low. The main caveat is that it helps produce server-side hook code and production enablement guidance, so any resulting implementation should be reviewed separately before deployment.

CredentialsLow risk

The material explicitly states that no keys or environment variables are required; it does not ask for API keys, tokens, or account credentials, so credential exposure and abuse risk appears low.

Network egressLow risk

No remote endpoints are declared, and the system flags it as prompt-only; based on the material, it does not appear to send user data to external services.

Code executionLow risk

The skill is described as guidance for creating a Mononoke server-side hook and reading reference documents; it appears to be a writing/process aid rather than an executable tool, and the material does not show it launching local processes, running scripts, or invoking system capabilities.

Data accessLow risk

No permission to read or write local files, repositories, or other resources is declared; while the README mentions several relative-path reference documents, that is descriptive content and does not by itself grant data-access capability.

Supply chainCaution

Positive signals include a GitHub-hosted open-source repository and the system's open-source flag, which improve auditability; however, this appears to be a skill within a larger repo, community adoption is shown as 0 stars, the license is undeclared, and maintenance status is unknown, so source trust is moderate and should be verified before use.

Recommendations

Treat it as a prompt/template rather than an audited implementation; review and test any generated hook code before merge or production enablement.
Verify the GitHub repository ownership, the exact skill file path, commit history, and recent maintenance status.
If enabling it in production per the README, review the hook's real privilege boundaries, performance impact, and failure-handling logic first.

Audited by: gpt-5.4 · 2026-06-17

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "write-hook" skill from askskill:
1. Download https://raw.githubusercontent.com/facebook/sapling/main/eden/mononoke/.llms/skills/write-hook/SKILL.md
2. Save it as ~/.claude/skills/write-hook/SKILL.md
3. Reload skills and tell me it's ready

// download

Download SKILL.mdInstall manifest ↗

// docs

Write a Mononoke Hook

Create a server-side Mononoke hook based on the user's request.

When creating a new hook, read references/implementation-guide.md
When writing hook logic that touches manifests or derived data, read references/performance-constraints.md
When writing unit or integration tests, read references/testing-patterns.md
Before submitting, read references/common-mistakes.md
After implementation is complete, read references/configerator-setup.md for enabling the hook in production

facebookGet→

$ loading_

Please install the "write-hook" skill from askskill: 1. Download https://raw.githubusercontent.com/facebook/sapling/main/eden/mononoke/.llms/skills/write-hook/SKILL.md 2. Save it as ~/.claude/skills/write-hook/SKILL.md 3. Reload skills and tell me it's ready

// docs

Write a Mononoke Hook

Create a server-side Mononoke hook based on the user's request.

When creating a new hook, read references/implementation-guide.md
When writing hook logic that touches manifests or derived data, read references/performance-constraints.md
When writing unit or integration tests, read references/testing-patterns.md
Before submitting, read references/common-mistakes.md
After implementation is complete, read references/configerator-setup.md for enabling the hook in production