fix: confine event hook script paths to the project tree

fix: confine event hook script paths to the project tree #7308