Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

Addressed second Codex reviewer blocker.

Reviewer finding:

• The prior local lookup used git rev-parse --show-toplevel, which could miss project-local installs from nested non-git directories or nested repos.

Fix:

• Removed git rev-parse from hook lookup.
• Removed any CLAUDE_PLUGIN_ROOT dependency.
• Hook commands now walk upward from $PWD looking for .claude/skills/gstack/....
• Then they fall back to $HOME/.claude/skills/gstack/....

New regression coverage:

• Executes the generated careful hook command from a nested non-git cwd.
• The fake project-local .claude/skills/gstack/careful/bin/check-careful.sh is found and executed.

Verification:

• ulimit -n 4096; bun test test/gen-skill-docs.test.ts
• 392 pass, 0 fail

Codex autoreview pass: CLEAN.

Reviewer scope:

• /tmp/openclaw-1873-v2.diff
• behavioral regressions
• safety hook behavior
• local/global Claude install compatibility
• test coverage
• issue Skill-frontmatter PreToolUse hooks broken on Claude Code 2.1.162 (${CLAUDE_SKILL_DIR} not populated) #1871 fit

Verdict:

• No blocking findings remain.

Verification already run:

• ulimit -n 4096; bun test test/gen-skill-docs.test.ts
• 392 pass, 0 fail