[External Plugin]: hol-guard

[kantorcodes]

Plugin name

hol-guard

Short description

Local-first AI coding-agent security with pre-action protection, MCP visibility, approval and receipt review, and pre-trust scanning for skills, plugins, MCP servers, and agent packages.

GitHub repository

hashgraph-online/hol-guard-plugin

Plugin path inside the repository

.claude-plugin

Ref to review

No response

Commit SHA to review

f807be2fe08d8c8c7b82c28666476815e5ca5232

Version

0.1.0

License identifier

Apache-2.0

Author name

Hashgraph Online

Author URL

https://github.com/hashgraph-online

Homepage URL

https://hol.org/guard

Keywords

hol-guard
ai-security
agent-security
mcp-security
supply-chain-security

Additional notes for reviewers

The submitted SHA is immutable. The plugin is maintained in the public HOL Guard plugin repository and the submitted path contains the existing Copilot-compatible plugin manifest. HOL Guard runs locally; this submission does not require Guard Cloud. I maintain HOL Guard and am disclosing that affiliation here. The same source is also under review in GitHub's official github/copilot-plugins marketplace via PR #78; this issue follows this repository's separate documented external-plugin intake rather than editing plugins/external.json directly.

Submission checklist

• The plugin lives in a public GitHub repository.
• The ref and/or sha I provided is immutable (release tag and/or full 40-character commit SHA), not a branch.
• This submission follows this repository's contribution, security, and responsible AI policies.
• This plugin is not already listed in the Awesome Copilot marketplace.

[github-actions]

🔴 Contributor Reputation Check: HIGH risk

Check	Risk
Profile	HIGH
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[github-actions]

⚠️ External plugin intake passed with spec warnings

This submission passed blocking quality checks and is ready for maintainer review, but it has non-blocking Agent Plugins spec compliance warnings.

• Plugin: hol-guard

• Repository: https://github.com/hashgraph-online/hol-guard-plugin

• SHA: f807be2fe08d8c8c7b82c28666476815e5ca5232

Reviewer signals

These are non-blocking heuristics for maintainer review; they are not evidence of misconduct or low quality.

Signal	Result
Repository age	99 day(s)
Repository activity	0 watchers
Repository counts	3 stars · 0 watchers · 1 forks · 2 open issues/PRs
Homepage heuristics	⚠️ pricing, sales, checkout

Quality gate summary

Legend: ✅ pass · ⚠️ warning · 🛑 fail

Gate	Status
spec compliance (non-blocking)	⚠️ warning
vally lint	✅ pass
install smoke test	✅ pass
version match	✅ pass
ref/sha consistency	⚪ not_run
canvas structure	⚪ not_run

• spec compliance: warning
• vally lint: pass
• install smoke test: pass
• version match: pass
• ref/sha consistency: not_run
• canvas structure: not_run
• overall: pass

spec compliance output (⚠️ warning)

Agent Plugins v1.0.0 manifest warnings:
- $schema should be "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json"
- schema validation: manifest must have required property '$schema'

vally lint output (✅ pass)

0 skill(s) linted

install smoke test output (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-oKM7SK/copilot-home/.copilot/installed-plugins/external-plugin-intake/hol-guard/plugin.json.

Version match output

- f807be2fe08d8c8c7b82c28666476815e5ca5232: matched version "0.1.0" at ".claude-plugin/plugin.json".

Ref/SHA consistency output

Ref/SHA consistency gate skipped because one of source.ref or source.sha was not provided.

Canvas structure output

Canvas structure gate skipped because plugin is not tagged with "canvas".

Canonical external.json payload

{
  "name": "hol-guard",
  "description": "Local-first AI coding-agent security with pre-action protection, MCP visibility, approval and receipt review, and pre-trust scanning for skills, plugins, MCP servers, and agent packages.",
  "version": "0.1.0",
  "author": {
    "name": "Hashgraph Online",
    "url": "https://github.com/hashgraph-online"
  },
  "repository": "https://github.com/hashgraph-online/hol-guard-plugin",
  "homepage": "https://hol.org/guard",
  "license": "Apache-2.0",
  "keywords": [
    "hol-guard",
    "ai-security",
    "agent-security",
    "mcp-security",
    "supply-chain-security"
  ],
  "source": {
    "source": "github",
    "repo": "hashgraph-online/hol-guard-plugin",
    "path": ".claude-plugin",
    "sha": "f807be2fe08d8c8c7b82c28666476815e5ca5232"
  }
}

View workflow run