Individual skill
hol-guard-protection
Use HOL Guard to preview and protect AI-agent package installs, Cursor surfaces, CI, and automation workflows.
docs/guard/SKILL.md
Source commit d56b73a2639b0e30cbca196c64335bcbd5acfc03
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 10, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,081
- Repository last updated
- Nov 10, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- mcp Repository topic
- security Repository topic
- agent-security Repository topic
- ai-agent-security Repository topic
- ai-agents Repository topic
- ai-security Repository topic
- claude-code Repository topic
- cursor Repository topic
- devsecops Repository topic
- gemini-cli Repository topic
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
HOL_Guard_Rust_Runtime_Majority_TODO_2026-10-01.mddoc · 136,666 bytesSKILL.mdcore · 2,420 bytesadapter-contributions.mddoc · 10,158 bytesadr/0001-mdm-managed-install-contract.mddoc · 2,196 bytesadr/0002-self-protection-authority.mddoc · 2,832 bytesadr/0003-desktop-shell-and-tray-ownership.mddoc · 4,824 bytesadr/0004-extension-control-center-semantics.mddoc · 5,874 bytesadr/0005-protection-center-semantics.mddoc · 3,858 bytesadr/0006-native-rust-runtime-boundary.mddoc · 2,606 bytesadr/0007-native-runtime-packaging.mddoc · 3,150 bytesadr/0008-native-resident-protocol-and-admission.mddoc · 6,282 bytesadr/0009-native-and-daemon-critical-failure.mddoc · 2,919 bytesadr/0010-native-posttool-default-auto.mddoc · 2,701 bytesadr/0011-extension-first-managed-controls.mddoc · 6,670 bytesadr/0012-everyday-and-technical-presentation.mddoc · 3,587 bytesadr/0012-python-hook-capability-cleanup.mddoc · 1,825 bytesadr/0013-native-resident-retirement.mddoc · 3,151 bytesadr/0014-native-catalog-read-model.mddoc · 15,854 bytesall-harness-hook-review.mddoc · 6,334 bytesapproval-decision-wait.mddoc · 1,719 bytesapproval-invariant.mddoc · 13,486 bytesarchitecture.mddoc · 3,968 bytesaudits/maj-ac-01-per-root-authority-audit.mddoc · 11,867 bytesaudits/python-verdict-sites.jsonasset · 23,850 bytesaudits/rm011-rtm006-gap-report.mddoc · 6,334 bytesblocked-requests.mddoc · 2,603 bytesbusiness-apps/account-disconnect.mddoc · 1,887 bytesbusiness-apps/account-lifecycle.mddoc · 2,492 bytesbusiness-apps/account-refresh.mddoc · 2,762 bytesbusiness-apps/attempt-journal.mddoc · 1,610 bytesbusiness-apps/budget-contract.mddoc · 1,888 bytesbusiness-apps/budget-reservations.mddoc · 2,638 bytesbusiness-apps/compatibility.mddoc · 3,810 bytesbusiness-apps/directory-preparation.mddoc · 4,318 bytesbusiness-apps/dispatch-outcome-receipts.mddoc · 2,981 bytesbusiness-apps/gmail-plain-input.mddoc · 3,916 bytesbusiness-apps/gmail-wire-input.mddoc · 3,911 bytesbusiness-apps/gog-command-extension.mddoc · 2,351 bytesbusiness-apps/google-identity-evidence.mddoc · 4,053 bytesbusiness-apps/google-workspace-pack.mddoc · 2,876 bytesbusiness-apps/gws-command-extension.mddoc · 4,519 bytesbusiness-apps/gws-gmail-command-input.mddoc · 3,396 bytesbusiness-apps/local-review-summary-ui.mddoc · 6,650 bytesbusiness-apps/local-review-summary.mddoc · 1,947 bytesbusiness-apps/native-policy-binding.mddoc · 3,085 bytesbusiness-apps/outbound-inspection.mddoc · 1,773 bytesbusiness-apps/owned-dispatch-claim.mddoc · 2,812 bytesbusiness-apps/owned-native-dispatch.mddoc · 2,192 bytesbusiness-apps/owned-send-transport.mddoc · 2,166 bytesbusiness-apps/policy-document-drafts.mddoc · 1,163 bytesbusiness-apps/private-review-input.mddoc · 3,342 bytesbusiness-apps/salesforce-sf-command-extension.mddoc · 3,037 bytesbusiness-apps/source-map.mddoc · 6,813 bytesbusiness-apps/worker-input.mddoc · 1,800 bytesbusiness-apps/worker-oauth.mddoc · 6,044 bytesbusiness-apps/worker-peer-identity.mddoc · 1,766 bytescatalog-discovery-preparation.mddoc · 6,309 bytesci-gate-ownership.mddoc · 3,469 bytescigar-integration/ACCEPTANCE.mddoc · 10,401 bytescigar-integration/CIGAR_ACQUISITION.mddoc · 7,492 bytescigar-integration/CIGAR_ATOMIC_CATALOG_STORAGE.mddoc · 7,196 bytescigar-integration/CIGAR_AUTHENTICATED_CATALOGS.mddoc · 10,694 bytescigar-integration/CIGAR_CATALOG_REFRESH.mddoc · 8,203 bytescigar-integration/CIGAR_CLEANUP_OWNERSHIP.mddoc · 5,098 bytescigar-integration/CIGAR_COLD_DATA_PREPARATION.mddoc · 9,763 bytescigar-integration/CIGAR_CONFIG_COMMIT_LANE.mddoc · 3,777 bytescigar-integration/CIGAR_DISABLED_RECOVERY.mddoc · 5,837 bytescigar-integration/CIGAR_DURABLE_ERASURE.mddoc · 3,556 bytescigar-integration/CIGAR_DYNAMIC_INFRASTRUCTURE.mddoc · 6,509 bytescigar-integration/CIGAR_ENGINE_PREPARATION.mddoc · 5,633 bytescigar-integration/CIGAR_EVIDENCE_UPGRADES.mddoc · 5,249 bytescigar-integration/CIGAR_INITIAL_RECOVERY.mddoc · 3,614 bytescigar-integration/CIGAR_INITIAL_SELECTION.mddoc · 4,071 bytescigar-integration/CIGAR_INSTALL_JOBS.mddoc · 8,936 bytescigar-integration/CIGAR_MANAGED_PYTHON_SETUP.mddoc · 6,064 bytescigar-integration/CIGAR_MEMORY_NOTES.mddoc · 6,125 bytescigar-integration/CIGAR_NATIVE_SELECTION.mddoc · 6,700 bytescigar-integration/CIGAR_OFF_STATE_SELECTION.mddoc · 7,094 bytescigar-integration/CIGAR_PREPARED_EVIDENCE.mddoc · 6,237 bytescigar-integration/CIGAR_PREPARED_RECOVERY.mddoc · 4,731 bytescigar-integration/CIGAR_PRIVATE_PYTHON_PREPARATION.mddoc · 9,259 bytescigar-integration/CIGAR_PYTHON_COMPATIBILITY.mddoc · 5,719 bytescigar-integration/CIGAR_RELEASE_MAINTENANCE.mddoc · 7,151 bytescigar-integration/CIGAR_RELEASE_REQUALIFICATION.mddoc · 3,954 bytescigar-integration/CIGAR_ROLLBACK_RECOVERY.mddoc · 5,381 bytescigar-integration/CIGAR_SCOPED_DELETION.mddoc · 5,614 bytescigar-integration/CIGAR_SCOPE_ERASURE_PRIMITIVES.mddoc · 4,984 bytescigar-integration/CIGAR_SERVICE_SWITCHING.mddoc · 5,993 bytescigar-integration/CIGAR_SETTINGS_OPT_IN.mddoc · 6,466 bytescigar-integration/CIGAR_SETTINGS_SELECTION_GUARD.mddoc · 4,129 bytescigar-integration/CIGAR_SOURCE_RESTORATION.mddoc · 7,137 bytescigar-integration/CIGAR_STOP_RECOVERY.mddoc · 8,188 bytescigar-integration/CIGAR_UPDATE_OPERATOR_CONTROLS.mddoc · 11,415 bytescigar-integration/CIGAR_UPDATE_PREFERENCES.mddoc · 8,965 bytescigar-integration/CIGAR_UPGRADE_CONTRACTS.mddoc · 13,205 bytescigar-integration/CIGAR_UPGRADE_EXECUTION_LOG.mddoc · 186,309 bytescigar-integration/CIGAR_UPGRADE_GOAL.mddoc · 4,172 bytescigar-integration/CIGAR_UPGRADE_PLAN.mddoc · 55,738 bytescigar-integration/CIGAR_UPGRADE_REASSESSMENT.mddoc · 6,548 bytescigar-integration/CIGAR_VERSIONS_ROUTING.mddoc · 5,374 bytescigar-integration/CIGAR_VERSIONS_UI.mddoc · 6,226 bytescigar-integration/CIGAR_WHEEL_PREPARATION.mddoc · 7,693 bytescigar-integration/EXECUTION_GOAL.mddoc · 15,186 bytescigar-integration/EXECUTION_LOG.mddoc · 354,159 bytescigar-integration/agent-access.mddoc · 7,355 bytescigar-integration/architecture.mddoc · 16,580 bytescigar-integration/broker-sharing.mddoc · 14,131 bytescigar-integration/delivery-and-validation.mddoc · 60,233 bytescigar-integration/evidence/README.mddoc · 504 bytescigar-integration/evidence/receipts.jsonasset · 83,894 bytescigar-integration/execution-handoff-design.mddoc · 10,389 bytescigar-integration/experience.mddoc · 12,310 bytescigar-integration/history-and-repair.mddoc · 7,156 bytescigar-integration/native-decision-context.mddoc · 5,521 bytescigar-integration/native-execution-context.mddoc · 13,680 bytescigar-integration/native-runtime-implementation.mddoc · 18,313 bytescigar-integration/private-persistence.mddoc · 7,439 bytescigar-integration/runtime-and-settings.mddoc · 20,165 bytescigar-integration/runtime-controls.mddoc · 14,155 bytescigar-integration/source-evidence.mddoc · 10,478 bytescigar-integration/source-manifest.jsonasset · 13,043 bytescline-local-protection-contract.mddoc · 6,568 bytescline-security-closure.mddoc · 6,250 bytescline-upstream-evidence.mddoc · 3,090 bytescloud-action-evaluator.mddoc · 11,955 bytescloud-command-capability.mddoc · 3,426 bytescodex-binding-diagnostics.mddoc · 3,584 bytescommand-activity-dashboard-ia.mddoc · 3,839 bytescommand-activity-privacy.mddoc · 6,227 bytescommand-backup-extension-coverage.mddoc · 1,245 bytescommand-cicd-platform-extension-coverage.mddoc · 1,930 bytescommand-cloud-extension-coverage.mddoc · 4,005 bytescommand-database-extension-coverage.mddoc · 1,376 bytescommand-dns-extension-coverage.mddoc · 1,939 bytescommand-domain-extension-coverage.mddoc · 4,822 bytescommand-extension-architecture.mddoc · 13,883 bytescommand-extension-operation-matrix-prd.mddoc · 9,349 bytescommand-extension-operation-matrix-todo.mddoc · 19,078 bytescommand-extension-precedence.mddoc · 2,589 bytescommand-extension-threat-model.mddoc · 10,724 bytescommand-framework-extension-coverage.mddoc · 1,284 bytescommand-kranz-extension-coverage.mddoc · 2,007 bytescommand-managed-service-extension-coverage.mddoc · 3,243 bytescommand-package-extension-coverage.mddoc · 3,619 bytescommand-remote-extension-coverage.mddoc · 2,080 bytescommand-search-messaging-extension-coverage.mddoc · 1,102 bytescommand-storage-extension-coverage.mddoc · 1,910 bytescontracts/extension-distribution-v2.mddoc · 4,282 bytescontracts/guard-cloud-review.mddoc · 4,640 bytescontracts/hook-data-plane-ownership.v2.jsonasset · 35,657 bytescontracts/native-hook-decision-receipt-persistence.v1.mddoc · 3,712 bytescontracts/python-capability-ownership.v1.jsonasset · 94,581 bytescontracts/runtime-majority-scope.v1.jsonasset · 151,334 bytescontracts/runtime-retirement-ledger.v1.jsonasset · 750,874 bytescontracts/rust-emergency-safe-profile.v1.jsonasset · 1,330 bytescontracts/rust-native-fail-safe-matrix.v1.jsonasset · 1,915 bytescontracts/rust-native-reason-codes.v1.jsonasset · 2,379 bytescursor-local-cloud-contract.mddoc · 4,891 bytesdeclarative-authoring-adr.mddoc · 11,741 bytesdeclarative-authoring-preview.mddoc · 5,402 bytesdesktop-bootstrap-contract.mddoc · 2,697 bytesdevin.mddoc · 7,059 bytesenterprise-evaluation-data-boundaries.mddoc · 3,599 bytesenterprise-event-taxonomy.mddoc · 3,516 bytesenterprise-export-examples.mddoc · 4,480 bytesenterprise-packet.mddoc · 7,591 bytesevaluation-cli.mddoc · 4,362 bytesevaluation-contract.mddoc · 5,111 byteseveryday-mode/copy-contract.mddoc · 1,555 byteseveryday-mode/vocabulary.jsonasset · 2,499 bytesevidence/declarative-extensions/catalog-parity-proof.v1.jsonasset · 2,234 bytesevidence/declarative-extensions/projection-compatibility.v1.jsonasset · 4,390 bytesevidence/declarative-extensions/source-compiler-proof.v1.jsonasset · 1,527 bytesevidence/native-extensions-main/README.mddoc · 2,286 bytesevidence/native-extensions-main/installed-extensions-linux.jsonasset · 5,403 bytesevidence/native-extensions-main/installed-harnesses-linux.jsonasset · 3,073 bytesexecution-assurance-launch-runbook.mddoc · 5,315 bytesexecution-assurance-offline-provider-checklist.mddoc · 3,706 bytesextension-builder/HOSTED-ACTIONS.mddoc · 6,542 bytesextension-builder/README.mddoc · 21,268 bytesextension-builder/VALIDATION.mddoc · 9,776 bytesextension-builder/examples/cli-surface.jsonasset · 551 bytesextension-builder/examples/cloud-binding-build.jsonasset · 5,588 bytesextension-builder/examples/cloud-binding-rejected.jsonasset · 7,033 bytesextension-builder/examples/mcp-tools.jsonasset · 527 bytesextension-contributions.mddoc · 16,085 bytesextension-control-center.mddoc · 9,031 bytesextension-control-recovery.mddoc · 3,816 bytesextension-fixture-isolation.mddoc · 3,264 bytesextensions/README.mddoc · 31,377 bytesextensions/artifact-publication.mddoc · 5,656 bytesextensions/catalog.v1.jsonasset · 379,209 bytesextensions/catalog.v2.jsonasset · 452,127 bytesextensions/contributing.mddoc · 18,039 bytesextensions/dispat-agent-guide.mddoc · 826 bytesextensions/dispat.mddoc · 4,109 bytesextensions/installed-policy-delivery.mddoc · 2,220 bytesextensions/internal-packs.mddoc · 7,990 bytesextensions/publisher-metadata.mddoc · 11,362 bytesfleet-posture.mddoc · 9,720 bytesfp-linked-workspace-source-read-20261021.mddoc · 4,877 bytesget-started.mddoc · 34,448 bytesgithub-command-capability-security.mddoc · 3,620 bytesgrok-executable-security.mddoc · 3,488 bytesguarded-repository-attestation.mddoc · 2,368 bytesharness-support.mddoc · 31,266 bytesharness-version-coverage.mddoc · 9,140 byteshook-review-engine.mddoc · 3,200 bytesincident-response.mddoc · 1,004 bytesinstalled-command-pack-authority.mddoc · 4,489 bytesk0s-k0rdent-use-case.mddoc · 6,592 byteslocal-cli-allowlist.mddoc · 9,435 byteslocal-risk-report-security-review.mddoc · 1,564 byteslocal-risk-report-threat-model.mddoc · 2,779 byteslocal-risk-report.mddoc · 1,252 byteslocal-vs-cloud.mddoc · 9,175 bytesmanaged-controls-actions-and-limits.mddoc · 6,903 bytesmanaged-controls-catalog-mismatch-recovery.mddoc · 3,641 bytesmanaged-controls-cloud-operator-guide.mddoc · 5,184 bytesmanaged-controls-glossary.mddoc · 5,365 bytesmanaged-controls-invalid-bundle-incident-runbook.mddoc · 2,897 bytesmanaged-controls-local-extensions.mddoc · 4,241 bytesmanaged-controls-policy-migration.mddoc · 4,519 bytesmanaged-controls-release-notes.mddoc · 3,142 bytesmanaged-controls-release-runbook.mddoc · 2,384 bytesmanaged-controls-rollback-runbook.mddoc · 2,702 bytesmanaged-controls-support-runbook.mddoc · 4,184 bytesmanaged-controls-threat-model.mddoc · 12,660 bytesmanaged-controls-vocabulary-inventory.mddoc · 4,815 bytesmanaged-controls/batches/03.jsonasset · 376 bytesmanaged-controls/batches/04.jsonasset · 417 bytesmanaged-controls/batches/05.jsonasset · 376 bytesmanaged-controls/batches/06.jsonasset · 392 bytesmanaged-controls/batches/07.jsonasset · 374 bytesmanaged-controls/batches/08.jsonasset · 427 bytesmanaged-controls/batches/09.jsonasset · 393 bytesmanaged-controls/batches/10.jsonasset · 427 bytesmanaged-controls/batches/11.jsonasset · 408 bytesmanaged-controls/batches/12.jsonasset · 412 bytesmanaged-controls/batches/13.jsonasset · 418 bytesmanaged-controls/batches/14.jsonasset · 498 bytesmanaged-controls/batches/15.jsonasset · 352 bytesmanaged-controls/batches/16.jsonasset · 381 bytesmanaged-controls/batches/17.jsonasset · 429 bytesmcp-google-workspace-gmail-coverage.mddoc · 3,149 bytesmcp-kranz-extension-coverage.mddoc · 3,288 bytesmcp-server-contributions.mddoc · 9,248 bytesmdm-adapter-contract.mddoc · 4,046 bytesmdm-compatibility-prd.mddoc · 28,760 bytesmdm-compatibility-todo.mddoc · 23,738 bytesmdm-deployment.mddoc · 9,159 bytesmdm-endpoints.v1.jsonasset · 5,196 bytesmdm-general-availability-roadmap.mddoc · 2,910 bytesmdm-local-testing.mddoc · 1,824 bytesmdm-networking.mddoc · 8,696 bytesmdm-release-evidence-template.mddoc · 962 bytesmuse.mddoc · 4,645 bytesnative-approval-enrollment.mddoc · 3,908 bytesnative-command-corpus-contract.mddoc · 7,050 bytesnative-hook-capability-cleanup.mddoc · 4,915 bytesnative-hook-data-plane-ownership.mddoc · 46,382 bytesnative-hook-oracle-retirement.mddoc · 7,867 bytesnative-runtime-slo-proof.mddoc · 5,869 bytesnetwork-remediation-readiness.mddoc · 3,659 bytesoffline-command-packs.mddoc · 3,946 bytespackage-review-settings.mddoc · 3,354 bytespaseo.mddoc · 10,142 bytespi-fast-hook-review.mddoc · 3,481 bytesplatform-arm-inventory.mddoc · 11,673 bytesplugin-install.mddoc · 7,801 bytesplugin-kit.mddoc · 11,256 bytesplugin-release-attestation.mddoc · 7,858 bytesplugin-telemetry.mddoc · 3,610 bytespolicy-cloud-exceptions-boundary.mddoc · 11,705 bytespolicy-extension-fields-v1.mddoc · 2,208 bytespolicy-recipes.mddoc · 446 bytespostmortems/native-policy-not-ready-2026-10-21.mddoc · 8,277 bytesprivacy-safe-outcome-receipts.mddoc · 1,973 bytesprotection-center-implementation-audit.mddoc · 3,819 bytesprotection-center-local-tools.mddoc · 2,730 bytesprotection-center.mddoc · 4,800 bytesprotection-credential-rotation-runbook.mddoc · 3,447 bytesprotection-incident-response-runbook.mddoc · 3,481 bytespyrig-command-protection.mddoc · 3,783 bytesreference-runtime-selection.mddoc · 4,014 bytesrelease-3-0-architecture-guarantees.mddoc · 7,063 bytesrelease-3-0-cloud-control-inventory.mddoc · 4,735 bytesrelease-3-0-compatibility-evidence.mddoc · 9,511 bytesrelease-3-0-containment-baseline.mddoc · 7,120 bytesrelease-3-0-contract-freeze-abuse-review.mddoc · 7,879 bytesrelease-3-0-contract-freeze.mddoc · 10,984 bytesrelease-3-0-dx-performance-baseline.mddoc · 2,914 bytesrelease-3-0-execution-path-inventory.mddoc · 5,706 bytesrelease-3-0-final-evidence.mddoc · 4,926 bytesrelease-3-0-harness-grades.mddoc · 4,822 bytesrelease-3-0-local-core-gate.mddoc · 3,082 bytesrelease-3-0-main-compatibility.mddoc · 2,070 bytesrelease-3-0-sandbox-required-consumers.mddoc · 3,630 bytesrelease-3-0-terminology.mddoc · 2,478 bytesrelease-3-0-threat-boundary-matrix.mddoc · 4,698 bytesrelease-3-0-tray-extraction-inventory.mddoc · 8,194 bytesrelease-3-code-quality-audit.mddoc · 72,206 bytesrelease-checklist.mddoc · 11,596 bytesremediation.mddoc · 3,886 bytesreview-local-queue-contract.mddoc · 3,383 bytesrust-authority-adversarial-review.mddoc · 1,122 bytesrust-daemon-edge-hardening-prd.mddoc · 6,600 bytesrust-daemon-edge-hardening-research.mddoc · 5,409 bytesrust-daemon-edge-hardening-takeaway-prompt.mddoc · 1,801 bytesrust-daemon-edge-hardening-todo.mddoc · 2,576 bytesrust-migration-batch-1-tasks.mddoc · 1,019 bytesrust-migration-batch-2-tasks.mddoc · 6,636 bytesrust-migration-batch-3-tasks.mddoc · 1,903 bytesrust-runtime-hardening-prd.mddoc · 15,156 bytesrust-runtime-hardening-takeaway.mddoc · 16,973 bytesrust-runtime-hardening-todo.mddoc · 81,386 bytesrust-runtime-migration-prd.mddoc · 4,455 bytesrust-runtime-migration-todo.mddoc · 5,642 bytesrust-runtime-threat-model-delta.mddoc · 3,561 bytesschemas/harness-capability-report.v1.schema.jsonasset · 5,019 bytesschemas/harness-version-coverage.v1.schema.jsonasset · 3,575 bytesschemas/local-integrity-snapshot-v1.schema.jsonasset · 12,040 bytesschemas/mdm-cloud-ack-v1.schema.jsonasset · 1,922 bytesschemas/mdm-cloud-config-v1.schema.jsonasset · 2,823 bytesschemas/mdm-cloud-enrollment-v1.schema.jsonasset · 1,102 bytesschemas/mdm-cloud-health-v1.schema.jsonasset · 1,929 bytesschemas/mdm-cloud-lab-report-v1.schema.jsonasset · 1,950 bytesschemas/mdm-cloud-remediation-v1.schema.jsonasset · 3,487 bytesschemas/mdm-policy-v1.schema.jsonasset · 4,321 bytesschemas/mdm-status-v1.schema.jsonasset · 3,146 bytesschemas/observer-assertion.v1.schema.jsonasset · 2,424 bytesschemas/protection-lease.v1.schema.jsonasset · 2,489 bytesschemas/protection-state.v1.schema.jsonasset · 1,795 bytesschemas/remediation-job.v1.schema.jsonasset · 1,660 bytesschemas/removal-authorization.v1.schema.jsonasset · 1,403 bytesschemas/self-protection-common.v1.schema.jsonasset · 2,865 bytesscript-approval-support.mddoc · 7,971 bytessecret-reads-and-local-test-execution.mddoc · 4,542 bytessecurity/sonar-audit-origin-review.jsonasset · 1,744 bytessecurity/sonar-hook-bridge-argv-review.jsonasset · 1,932 bytessecurity/sonar-hook-bridge-argv-review.mddoc · 3,843 bytessecurity/sonar-loopback-review.mddoc · 1,907 bytessecurity/sonar-reviewed-contracts.jsonasset · 6,164 bytesself-protection-contract.mddoc · 10,491 bytesself-protection-threat-model.mddoc · 5,423 bytesskill-directory-identity.mddoc · 4,933 bytessmithguard.mddoc · 6,840 bytesstrands-agents-integration.mddoc · 4,432 bytestesting-matrix.mddoc · 1,960 bytestroubleshooting.mddoc · 4,340 bytestrust-attestation-security.mddoc · 3,345 byteswave-five-followon-decision-gates.mddoc · 3,961 byteswindows-gate-driver-out-of-repo-20261020.mddoc · 9,613 byteswindows-platform-coverage.mddoc · 4,999 bytes
Read excerpt
# HOL Guard Skill Guidance
Use this guidance when an AI agent is about to add or update dependencies.
## Before package installs
1. Preview the install decision:
- `hol-guard protect --dry-run -- npm install <package>`
2. Check current workspace risk posture:
- `hol-guard supply-chain scan --json`
3. Explain a specific package verdict:
- `hol-guard supply-chain explain <package>@<version> --ecosystem <ecosystem>`
4. Confirm package manager interception is installed:
- `hol-guard package-shims status --json`