hol-guard
Installation
SKILL.md
HOL Guard
HOL Guard protects local AI harnesses before tools run. Use this skill when the user wants AI antivirus behavior, local approval review, Codex protection, Claude Code protection, MCP safety checks, skill/package verification, or release gates from hol-guard and plugin-scanner.
Hard Rules
- Never read
.envfiles. - Never bypass Guard approvals.
- Do not mark a workspace protected until a Guard command proves status.
- Prefer reversible Guard commands over direct harness config edits.
- Do not mutate user-level harness config unless the
hol-guardcommand owns that mutation. - Treat scanner failures as real until inspected.
- Preserve existing user changes and inspect
git status --shortbefore edits in a repo.
Install Check
First check whether the CLI exists: