naturalize is a Markdown skill and a small shell hook. It has no network calls, no build step, and no runtime dependencies. The text you give it stays on your machine and goes only to the assistant you are already using.

The SessionStart hook reads one local Markdown file (hooks/session-default.md), escapes it as JSON, and prints it so the assistant loads it as context. It writes nothing, sends nothing, and exits quietly if the file is missing.

If you find a security issue, please open a GitHub security advisory on the repository, or open a regular issue if it is low risk. Describe what you found and how to reproduce it. We will respond as soon as we can.

In scope: the hook scripts, the skill instructions, anything that could cause the tool to modify files it should not or leak the text it processes.

Out of scope: the assistant's own behavior, and the quality of any single rewrite. Those are product questions, not security issues.