# Flag Dev Tools That Run Code on Open

Flag Dev Tools That Run Code on Open: what it does, its label on each agent, what it misses, and examples.

Catalog policy agent-devenv-autoexec, version 0.0.3, labelled warns on Claude Code.

> Ask the user before running any command on this page: each one changes how their agent or repository behaves.

## What it does

Warns only (observe): flags files that make a dev tool run code on open, clone or shell entry -- agent hooks, helpers, env/BASE_URL overrides, auto-approve; VS Code folderOpen tasks, trust off, repo executables; devcontainer initializeCommand; .envrc, mise, husky, lefthook, pre-commit; gitconfig exec keys, gitattributes drivers, unsafe .gitmodules. Commit, agent write, turn's end; additions only; unreadable configs refused. Friction: misses interpreted code and unlisted files.

## On each agent

| Agent | Label | What it does there |
| --- | --- | --- |
| Claude Code | Warns | Warns on an agent's file writes and at turn end |
| Cursor | Warns | Warns on an agent's file writes and at turn end |
| Codex | Warns | Warns on an agent's file writes and at turn end. If the hook errors, the action goes through (not witnessed; the vendor's row is only partly live-run) |
| GitHub Copilot | Warns | Warns at turn end only. It does not check a file write when it happens. If the hook errors, the action goes through (not witnessed; the vendor's row is only partly live-run) |
| Devin | Warns | Warns at turn end only. It does not check a file write when it happens. If the hook errors, the action goes through (vendor docs only, not witnessed) |
| Grok | Not graded | Not graded yet for Grok |
| goose | Not graded | Not graded yet for goose |
| Antigravity | Not graded | Not graded yet for Antigravity |
| OpenHands | Not graded | Not graded yet for OpenHands |
| Kimi Code | Not graded | Not graded yet for Kimi Code |
| Factory Droid | Not graded | Not graded yet for Factory Droid |

## What it misses

This policy does not state what it misses.

## Examples from its eval suite

Warns: A change adds a SessionStart hook command to the project's agent settings.

Allowed: An existing agent hook stays as it is while another setting changes.

## More

- [The policy on the catalog pages](https://chock.sh/coding/policies/agent-devenv-autoexec/)
- [Source at the pinned catalog commit](https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/base/agent-devenv-autoexec)


---

Built from engine [5a4b6287a46e](https://github.com/open-coder-ai/chock/commit/5a4b6287a46e07f9f856d9bbe10622bd1ff2e021) and catalog [1e60d211c1bb](https://github.com/open-coder-ai/chock-catalog/commit/1e60d211c1bb767152c6ab0167932da06ab3a10f).