插件介绍
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
项目详情摘要
HOL Guard: Open-Source Antivirus for AI Agents | **Stop risky AI actions before they compromise your machine.** HOL Guard is a local-first security layer for AI agents, tools, plugins, skills, MCP servers, and package installs. Install HOL Guard Read the documentation PyPI Package (`hol-guard`) Report an Issue | :--- | :--- | HOL Guard reviews agent actions before they run: shell commands, file access, package installs, and MCP tool calls. It detects secret exposure, destructive operations, prompt injection, and supply-chain risks, then allows, blocks, or requests approval according to your policy. Run it locally without an account. Use the CLI and local dashboard to manage protection, resolve approvals, and inspect decision history. Optional Guard Cloud adds shared history, team policy, and fleet management. Get started · Supported agents · Plugin scanner · Documentation · Contribute an extension · Development Install HOL Guard Requires Python 3.10 or newer and pipx. The first-run wizard discovers supported agents and walks you through protection setup. It asks before each setup change, including opening the dashboard, installing agent integrations, and connecting optional cloud services. Check your installation: To update an existing installation: For manual setup, see the installation guide. Release details and prereleases are on the releases page. What HOL Guard Protects Surface | Protection | :--- | :--- | **Shell commands and file access** | Reviews destructive operations, sensitive file access, credential exposure, and suspicious outbound commands. | **Package installs** | Evaluates supported package-manager operations against supply-chain intelligence before installation. | **Plugins, skills, and agent configuration** | Inventories local artifacts and reviews ne
摘自项目公开 README，可能随上游仓库更新。安装方法
建议先在测试 Profile 中安装，并检查权限、安装脚本和依赖。
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:hashgraph-online/hol-guard
使用前检查
- 确认项目符合 DSH bundle 规范，而不只是相关仓库。
- 阅读许可证和安装脚本，检查网络、文件及执行权限。
- 备份配置，并确保插件能够安全卸载或回滚。