HOL Guard Plugin

imageHOL Guard imageskills.sh

Codex plugin for HOL Guard, the local AI security layer from hol-guard.

HOL Guard protects local AI harnesses before tools run. It can inspect Codex, Claude Code, Copilot CLI, Cursor, Gemini, Hermes, OpenClaw, OpenCode, and Antigravity surfaces, then route risky changes through local approvals and receipts.

Install the security skill

Install the portable plugin-scanner skill with the open Skills CLI:

npx skills add hashgraph-online/hol-guard-plugin --skill plugin-scanner

The Skills CLI supports many coding agents. The skill asks before installing the hol-guard package and never executes code from a repository just to scan it.

What this plugin adds

• A public Codex skill at skills/hol-guard/SKILL.md.
• A portable security skill at skills/plugin-scanner/SKILL.md.
• Guard setup guidance for Codex, Claude Code, Copilot CLI, Cursor, Gemini, Hermes, OpenClaw, OpenCode, and Antigravity.
• Scanner guidance for Codex plugins, Claude Code project surfaces, skills, MCP servers, and marketplace packages.
• Helper script for common hol-guard and plugin-scanner workflows.
• Validation test for the plugin manifest, skill, assets, script paths, and .mcp.json.

MCP server

This plugin includes a .mcp.json that registers the HOL Guard local MCP server (guard-mcp.v1). The server runs directly via the hol-guard binary - no npx, package-manager startup, or shell wrappers.

Prerequisites

• hol-guard CLI installed and on PATH (minimum version: 2.0.1024)
• Python >= 3.10

Tools

The MCP server exposes three read-only tools:

All tools return a guard-mcp.v1 contract envelope with contractVersion, source: local, generatedAt, and freshness: real-time.

Local vs Cloud

• Local (hol-guard mcp serve --stdio): reads local Guard data offline. No network access required.
• Cloud (/api/guard/mcp on the portal): reads synced workspace data. Requires OAuth Bearer token with guard:workspace.read and guard:receipt.read scopes.

Setup

pipx install hol-guard
hol-guard status

The .mcp.json is automatically discovered by MCP-compatible clients. No additional configuration needed.

Install HOL Guard locally

Recommended:

pipx install hol-guard

Fallback:

python3 -m pip install --user hol-guard

Verify:

hol-guard status
hol-guard detect --json

Use from Codex

Install this plugin in Codex, then ask:

Use HOL Guard to protect this workspace before running agent tools.

or:

Use HOL Guard to scan this plugin before release.

Local helper

bash scripts/hol-guard-plugin status
bash scripts/hol-guard-plugin harnesses
bash scripts/hol-guard-plugin protect claude-code
bash scripts/hol-guard-plugin protect codex
bash scripts/hol-guard-plugin scan-system claude .
bash scripts/hol-guard-plugin scan-system codex .
bash scripts/hol-guard-plugin scan .
bash scripts/hol-guard-plugin evidence

The helper does not read .env files. It only calls hol-guard and plugin-scanner commands already exposed by the upstream package.

Supported harness systems

Validation

npm test

No runtime dependencies are required for the validation test.

Source projects

• Plugin repository: https://github.com/hashgraph-online/hol-guard-plugin
• Guard and scanner source: https://github.com/hashgraph-online/hol-guard
• HOL Guard product: https://hol.org/guard