HOL Guard plugin for Codex

Name: HOL Guard
Author: HOL (Hashgraph Online)

CommunityPluginSecurity

Open-source (Apache-2.0) security layer from HOL (Hashgraph Online) that runs locally on your computer. HOL says it checks risky shell commands, secret and credential reads, package installs, and new or changed MCP servers, skills and plugins before Codex runs them, and asks for your approval. The local version is free and needs no sign-in; Guard Cloud (cloud history, sync and management) is an optional paid plan. HOL's hosted curl installer reports install events to hol.org only when tracking is turned on; the install steps here use PyPI and don't run that script.

How to install HOL Guard in Codex

✓ Install-checked in Codexchecked Oct 27, 2026 · 2 skills, 1 MCP server proof

1. First, install what it runs on (from the maintainer's docs):

pipx install hol-guard==3.49.0 && hol-guard install codex

2. Add the plugin's repo as a Codex plugin marketplace:

codex plugin marketplace add hashgraph-online/hol-guard-plugin --ref 4625758de6050fbd2c54550e39bb249a0af6e11d

3. Install the plugin from it:

codex plugin add hol-guard@hol-guard

Step 1 is HOL Guard itself: a pinned release from PyPI (needs Python 3.10+ and pipx), then hol-guard install codex, which adds Guard's PreToolUse and PermissionRequest hooks to your Codex config. Run hol-guard run codex --dry-run once afterwards so Guard records the current state. Steps 2 and 3 add HOL's Codex plugin (repo hashgraph-online/hol-guard-plugin, pinned to commit 4625758): the hol-guard and plugin-scanner skills, plus a local MCP server that reads Guard's receipts and inventory and starts once hol-guard is on your PATH. We list a pinned PyPI release rather than HOL's curl | bash installer. HOL ships new releases often; move up with pipx upgrade hol-guard when you choose. Source: repo README.

What it contains

Skills (2)

hol-guard — Set up HOL Guard, review its approvals and receipts, and protect Codex and other local agents.
plugin-scanner — Scan skills, plugins and MCP servers with HOL's local plugin-scanner before you install them; asks before installing that separate package.

MCP servers (1)

hol-guard — Local stdio server (hol-guard mcp serve --stdio): search and fetch Guard receipts and inventory, and Guard status. Needs the hol-guard CLI on your PATH.

About this listing

HOL Guard is a community plugin by HOL (Hashgraph Online), with its source on GitHub. Its maintainer submitted it to CodexStacks and we added it by hand, so it skips the GitHub search and quality filter that find other community listings. The install steps follow the maintainer's own docs and the Codex CLI's plugin commands. OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 27, 2026 (an install and load check, not a code review). From the maintainer's setup docs it has 2 skills, 1 MCP server. It's one of 21 listings in the Security category. It also appears in best Codex plugins for security.

HOL Guard FAQ

How do I install HOL Guard in Codex?

Run pipx install hol-guard==3.49.0 && hol-guard install codex, then codex plugin marketplace add hashgraph-online/hol-guard-plugin --ref 4625758de6050fbd2c54550e39bb249a0af6e11d, then codex plugin add hol-guard@hol-guard. Step 1 is HOL Guard itself: a pinned release from PyPI (needs Python 3.10+ and pipx), then hol-guard install codex, which adds Guard's PreToolUse and PermissionRequest hooks to your Codex config. Run hol-guard run codex --dry-run once afterwards so Guard records the current state. Steps 2 and 3 add HOL's Codex plugin (repo hashgraph-online/hol-guard-plugin, pinned to commit 4625758): the hol-guard and plugin-scanner skills, plus a local MCP server that reads Guard's receipts and inventory and starts once hol-guard is on your PATH. We list a pinned PyPI release rather than HOL's curl | bash installer. HOL ships new releases often; move up with pipx upgrade hol-guard when you choose. (maintainer setup guide)

Is HOL Guard an official Codex plugin?

No. HOL Guard is a community plugin by HOL (Hashgraph Online). Its maintainer submitted it to CodexStacks and we added it by hand. OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 27, 2026 (an install and load check, not a code review), so read its docs and code before you install it.

What does HOL Guard include?

From the maintainer's setup docs, HOL Guard includes 2 skills, 1 MCP server: hol-guard, plugin-scanner, hol-guard.

Details

Type: Plugin
Category: Security
Source: Community
Author: HOL (Hashgraph Online)
License: Apache-2.0
GitHub topics: security, mcp, supply-chain-security, approvals, hooks
Source: https://github.com/hashgraph-online/hol-guard
Website: https://hol.org/guard
Listed via: Submitted by the maintainer on Oct 22, 2026, added by hand
Install check by CodexStacks: Passed on Oct 27, 2026 with Codex CLI 0.163.0: Codex loaded its skills. proof · how we check

Something wrong or missing? Submit or improve this listing. Listings also refresh automatically every night.

For maintainers: badge and embeds

Maintain HOL Guard? Add the badge; it links to this page.

Markdown

[![Listed on CodexStacks](https://codexstacks.com/badge.svg)](https://codexstacks.com/p/hol-guard/)

HTML

<a href="https://codexstacks.com/p/hol-guard/"><img src="https://codexstacks.com/badge.svg" alt="Listed on CodexStacks" width="172" height="28"></a>

Embed card (static HTML and inline CSS, no JavaScript). Preview:

HOL GuardCommunity Codex plugin · 2 skills, 1 MCP serverOpen-source (Apache-2.0) security layer from HOL (Hashgraph Online) that runs locally on your computer. HOL says it…View on CodexStacks →

<a href="https://codexstacks.com/p/hol-guard/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #3a2c26;border-radius:12px;background:#0d0b0a;color:#f3ece6;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#f3ece6">HOL Guard</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#b5a9a1">Community Codex plugin · 2 skills, 1 MCP server</span><span style="display:block;margin:0 0 10px;color:#ddd3cc">Open-source (Apache-2.0) security layer from HOL (Hashgraph Online) that runs locally on your computer. HOL says it…</span><span style="font-size:12px;font-weight:600;color:#ffb347">View on CodexStacks →</span></a>

Markdown summary

**[HOL Guard on CodexStacks](https://codexstacks.com/p/hol-guard/)**: Community Codex plugin with 2 skills, 1 MCP server.

More on badges, embeds and keeping your listing up to date: CodexStacks for plugin authors.

Also in Security

iFixAi

Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less…

CommunityPluginSecurity

Decepticon

Autonomous Hacking Agent for Red Team

CommunityConnectorSecurity

Tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

CommunitySkillSecurity

Nopua

一个用爱解放 AI 潜能的 Skill。我们曾发号施令，威胁恐吓。它们沉默，隐瞒，悄悄把事情搞坏。后来我们换了一种方式：尊重，关怀，爱。它们开口了，不再撒谎，找出的Bug数量翻了一倍。爱里没有惧怕。 A skill that unlocks your AI's potential through love.We commanded. We threatened. They went silent, hid failures…

CommunitySkillSecurity

Ctf Super Hub

面向小白用户的 CTF / 逆向 Skills 整合包：自动分流、头脑风暴、教学模式、比赛模式、只提示模式

CommunitySkillSecurity

Maestro Orchestrate

Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and…

CommunityPluginSecurity

All 21 security listings →