{"schema_version":"v0.1","generated_at":"2026-08-17 01:32 UTC","methodology_version":"v4.3","license":"CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/","name":"HOL Guard","repo":"hashgraph-online/hol-guard","display_repo":"","url":"https://github.com/hashgraph-online/hol-guard","listing_class":"agent","rank":20,"previous_rank":20,"rank_delta":0,"stars":437,"stars_fmt":"437","forks":13,"forks_fmt":"13","last_push":"2026-08-17","days_ago":0,"weekly_commits":273,"commits_low_confidence":false,"score":71.1,"description":"Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers","language":"Python","open_issues":4,"category":"Security & Guardrails","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"hol-guard","weekly_downloads":29578,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.95,"scorecard_score":7.6,"scorecard_checks":{"Code-Review":0,"Dependency-Update-Tool":10,"Security-Policy":10,"Maintained":10,"Dangerous-Workflow":10,"Token-Permissions":10,"Binary-Artifacts":10,"CII-Best-Practices":0,"Pinned-Dependencies":8,"SAST":9,"Fuzzing":10,"Packaging":10,"License":10,"Branch-Protection":3,"Signed-Releases":10,"Vulnerabilities":0,"Contributors":6,"CI-Tests":9},"scorecard_scanned_at":"2026-08-16T21:44:08Z","slug":"hol-guard","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/codex_plugin_scanner/guard/adapters/mcp_servers.py","Found MCP-related server path: src/codex_plugin_scanner/guard/mcp/server.py","Found MCP-related server test path: tests/fixtures/hermes-plugin-evil/mcp_servers.json"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","Multi-provider (LiteLLM)"],"requires_api_keys":true,"confidence":"high","evidence":["Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml","README/docs also mention Multi-provider (LiteLLM)","Ships a Claude Code plugin manifest (tests/fixtures/claude-plugin-good/.claude-plugin/plugin.json)","Ships a Gemini CLI plugin manifest (tests/fixtures/gemini-extension-good/gemini-extension.json)","Found credential/config marker 'AWESOME_CODEX_PLUGINS_TOKEN'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"high","evidence":["Found declared path: tests/fixtures/bad-plugin/.codex-plugin/plugin.json","README/docs also mention a marketplace plugin/integration surface"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'hol-guard' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":88.6,"trust_score_v2":88.6,"rank_v2":20,"rank_v2_delta":7,"trust_v2_adjustment":1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":21.7,"identity":18.0,"transparency":15.0,"maintenance":20.0,"adoption":12.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false,"trust_credential":{"spec":"https://hvtracker.net/spec/trust-credential/v0.2","version":"0.2","issuer":"hvtracker.net","subject":{"repo":"hashgraph-online/hol-guard","slug":"hol-guard","agent_url":"https://hvtracker.net/agents/hol-guard"},"methodology_version":"v4.3","issued_at":"2026-08-17 01:32 UTC","expires_at":"2026-08-24T01:32:12Z","trust_score":88.6,"confidence":1.0,"evidence_grade":"A","dimensions":{"safety":21.7,"identity":18.0,"transparency":15.0,"maintenance":20.0,"adoption":12.3},"listing_status":"listed","evidence_hash":"93995349d723d0499ec460b7e950203209d7e36682a06970699fc22f5f80ae49","signature":"DjaalAwLRkI8KavnfrHSjIFPEz3KfmFboOtI03bvxOtEZLHodLIMnMsUlxcGF9klww/GXzgHS7KdMR8C55PhBA=="},"history":[{"date":"2026-08-16","rank":20,"score":71.1,"trust_score":88.6,"evidence_grade":"A","stars":437},{"date":"2026-08-17","rank":20,"score":71.1,"trust_score":88.6,"evidence_grade":"A","stars":437}],"events":[{"date":"2026-08-16","type":"listed","reason_code":"listed","label":"Newly Listed","short_label":"New","tone":"positive","detail":"First tracked at rank #20"}],"recent_changes":[{"date":"2026-08-16","type":"listed","reason_code":"listed","label":"Newly Listed","short_label":"New","tone":"positive","detail":"First tracked at rank #20"}]}