Stack Gems
Menu
WorkbenchBestNewSkillsLogAboutSubmit
← Catalog

HOL Guard

Apache local antivirus for agents — MCP, skills, shell, packages

AI Agents / Security · Apache-2.0 · 933

Reviewed 2026-10-02 · last push 2026-10-19 · repo checked 2026-10-19

Visit siteGitHub

What's Good

Apache-2.0 (hashgraph-online/hol-guard). PyPI `hol-guard` and `plugin-scanner` (HTTP 200). `pipx install hol-guard` then `hol-guard init` — no account required for local mode. Covers secret exposure, destructive ops, prompt injection, and supply-chain risks across agents/plugins/skills/MCP. Optional Guard Cloud for team policy is separate from the OSS bar.

The Catch

Vs SkillSpector / mcp-scanner / destructive-command-guard / AI-Infra-Guard: SkillSpector scans skills pre-install; MCP Scanner audits MCP servers; dcg is a host deny-hook; AI-Infra-Guard is red-team platform — HOL Guard’s catch is runtime local policy/antivirus across agent actions including MCP calls. Policy false positives can stall agents; optional cloud is not required — keep local-first if that is the point.

Verdict

Apache local agent antivirus when you need runtime allow/block on tools and MCP — not skills-only scanners and not MCP-server audit alone.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Reviewed on Stack Gems

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/hol-guard.svg)](https://stackgems.com/gems/hol-guard)

HTML

<a href="https://stackgems.com/gems/hol-guard"><img src="https://stackgems.com/badge/hol-guard.svg" alt="HOL Guard reviewed on Stack Gems" height="20"></a>

Related

AI Agents →