You'll notice
Hook detail text is sanitized before display, so config text cannot inject terminal control sequences.
The hook-details panel now sanitizes displayed strings, including the matcher, plugin name, status message, and command/config summary, replacing control characters, format characters, and other unsafe code points with visible placeholders (for example ESC becomes ␛, and newlines/tabs get their own glyphs). This prevents terminal-control-sequence injection via hook config text.