If your file-guard hook is registered on Read, it never sees cat
A developer found that Claude Code's PreToolUse hooks registered on the Read tool do not fire when file contents are accessed via Bash commands like cat, allowing secrets to reach the model. Testing o…