Giving an agent bash is handing it scissors and telling it to run. PreToolUse inspects each command before it executes. The deny-hooks I run in Claude Code, and why each one exists.