hooks_build-agents

What hooks_build-agents does on Claude Flow

AI agents invoke hooks_build-agents to trigger actions in Claude Flow. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why hooks_build-agents is rated High

This tool runs code generation and agent configuration logic, triggering external operations (agent spawning/initialization) whose effects depend on input arguments. It is Execute rather than Write because it involves code execution and hook-based automation, not merely data creation. Severity is high because misconfigured agent spawning in a multi-agent orchestration system could cascade across the swarm.

From the tool's definition Tool description states 'Generate optimized agent configurations' and references 'native Bash hooks (via Claude Code' — indicates execution of code/bash commands to build and configure agents, with effects dependent on the configuration parameters supplied.

The rule that runs hooks_build-agents safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Claude Flow, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For hooks_build-agents, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "hooks_build-agents": {
      "limits": [
        {
          "counter": "hooks_build-agents_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about hooks_build-agents