# Block Env Writes

> PreToolUse hook that blocks shell writes to .env files (redirect, tee, cp/mv, sed -i, $IFS-obfuscated spaces, node -e/python -c inline writes). Permission deny rules only see Write/Edit tool calls, not a shell writing the file itself.

## Facts
- Page: https://tashan.sh/capability/plugin-r1ckshot-team-marketplace-block-env-writes
- tashan id: plugin:r1ckshot/team-marketplace/block-env-writes
- Source: https://github.com/r1ckshot/team-marketplace
- Type: plugin
- Category: security
- tashan score: 36.0 / 100
- Adoption: 7.0
- Upkeep: 63.0
- Freshness: 97.0
- Evidence coverage: 84% of the inputs this score can use
- Health: active
- Instruction depth: not yet graded
- Official: no

## Install

```sh
/plugin marketplace add r1ckshot/team-marketplace
/plugin install block-env-writes@team-marketplace
```

## Security audit
Not scanned. We audit npm-published capabilities; this one has no npm package we can resolve, or has not reached the queue. This is not a clean bill of health.

---
Measured 2026-08-14 by tashan (https://tashan.sh) from public evidence. Scorer s5.