These agents have shell access, file access, and connected accounts. We built Shoofly to sit in front of tool calls before they fire.

- PreToolUse / PostToolUse hooks intercept every tool call - Blocks prompt injection, credential theft, unauthorized writes, malware in tool results - Works with OpenClaw, Claude Code CLI, and Cowork / Dispatch - Open YAML policy -- read it, fork it, audit it - Free tier detects. $5/mo blocks.

The Cowork piece was the interesting part. Cowork runs Claude Code inside a full Ubuntu VM -- host hooks don't fire there. We used the plugin system with hooks/hooks.json and VirtioFS to get sub-50ms alert latency from inside the VM to host notifications.

curl -fsSL https://shoofly.dev/install.sh | bash

shoofly.dev