Log Skills Registry Reload Events

Skills are code too, and a skill shipped inside a cloned repo updating itself mid-session is a reasonable thing to want visibility into, separate from ordinary settings changes. Wire this with matcher "skills" to scope it specifically.

MCP & Config Safety Event: ConfigChange Claude Code Open source · Free

1. Save this as the hook script

#!/usr/bin/env python3
"""ConfigChange hook — logs skills registry reload events.
Wire this with matcher "skills"."""
import json, sys, datetime
from pathlib import Path

data = json.load(sys.stdin)
log_path = Path(data.get("cwd", ".")) / ".claude" / "skills_reload_log.jsonl"
log_path.parent.mkdir(parents=True, exist_ok=True)

entry = {"ts": datetime.datetime.utcnow().isoformat() + "Z", "session_id": data.get("session_id")}
with open(log_path, "a") as f:
    f.write(json.dumps(entry) + "\n")

sys.exit(0)

Save to a path inside your project, e.g. .claude/hooks/log-skills-reload-events.sh, then chmod +x it.

2. Wire it into .claude/settings.json

{
  "hooks": {
    "ConfigChange": [
      {
        "matcher": "skills",
        "hooks": [
          {"type": "command", "command": "python3 .claude/hooks/log-skills-reload-events.py"}
        ]
      }
    ]
  }
}

Before you use this

A hook runs with your local shell's permissions — review the script above before adding it, the same way you'd review any script you didn't write yourself. See our guide on hook security risks for the specific CVEs this category of feature has already produced.

Related hooks

Block Elicitation From an Unlisted MCP Server
Declines a user-input request from any MCP server not in an explicit allowlist.
Warn on Auto-Approved MCP Servers
The defensive counterpart to CVE-2025-59536 — flags a repo's own settings before you trus…
Warn on MCP Server Tool-List Drift ("Rug-Pull" Detection)
Flags when a previously-trusted MCP server's declared tool set changes mid-project.
Block MCP Tool Calls Outside an Allowlist
Denies any mcp__ tool call whose server prefix isn't on an explicit allowlist.
← All hooks
FEEDBACK