Control shell commands

Agent support · Hooks & Lifecycle

Dedicated hooks for intercepting shell/terminal command execution — block dangerous commands, audit, or inject env vars

Tool-Specific Hooks Hooks & Lifecycle

Supported

Partial

Unknown

Claude Code Current · Jun 2026

Cline CLI Current · Jun 2026

Codex CLI Current · Jun 2026

GitHub Copilot CLI Current · Jun 2026

Cursor Current · Jun 2026

2.1.140 - 2.1.197

3.0.0 - 3.0.34

0.131.0 - 0.142.4

1.0.46 - 1.0.66

3.7 - 3.9

2.1.85 - 2.1.139

—

0.117.0 - 0.130.0

1.0.12 - 1.0.45

3.0 - 3.2

2.1.20 - 2.1.84

—

0.92.0 - 0.116.0

0.0.396 - 1.0.11

2.5

2.1.16 - 2.1.19

—

0.89.0 - 0.91.0

0.0.389 - 0.0.395

2.4

2.0.0 - 2.1.15

—

0.44.0 - 0.88.0

0.0.374 - 0.0.388

1.7 - 2.0

1.0.38 - 1.0.128

—

0.2.0 - 0.42.0

—

1.2

0.2.31 - 1.0.37

—

0.45 - 1.0

Supported by all 5 agents.

HoverTap any cell for version details.

Agent event mapping

claude-code PreToolUse with Bash matcher
cline PreToolUse (on execute_command)
codex-cli PreToolUse (shell-only initially)
cursor beforeShellExecution, afterShellExecution

Sub-capabilities

Block dangerous commands before they execute
Cursor: dedicated events with command string in context
Claude Code: uses generic PreToolUse with matcher pattern 'Bash'

What can your agent actually do?

Agent event mapping

Sub-capabilities