Treat Git hooks like install scripts. Frank Wiles describes a post-checkout…

Treat Git hooks like install scripts. Frank Wiles describes a post-checkout hook that fetched an OS-specific binary from a C2 and ran it, which matches the supply-chain attack vectors we worry about. Disable or quarantine hooks in agent sandboxes, CI clones, take-home exercises, and any repo that crosses trust boundaries. If you don't, developer workflows remain an easy remote-execution surface.