Macos Notifier

Use this skill when the user asks why the notifier fired, how it decides a command is risky, how turn-finished notifications work, or how to tune its behavior.

What it does

• The plugin installs a PreToolUse hook for the Bash tool.
• That hook inspects the pending shell command and sends a macOS notification for commands that are likely to trigger approval.
• The plugin also installs a Stop hook that sends a macOS notification when a Codex turn finishes.
• The detector is heuristic. It currently alerts for:
  • network and remote operations
  • high-risk commands such as sudo, rm -rf, and git reset
  • mutating commands that reference paths outside the current workspace

Limits

• Codex does not currently expose a dedicated ApprovalRequested hook, so pre-approval notifications are best-effort rather than exact.
• The hook currently covers Bash tool use. Connector and MCP approvals are outside this hook's direct visibility.