setup SKILL.md skillA

setup from hashgraph-online/hol-guard is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add hashgraph-online/hol-guard/setup@git:20260813.0b13ecd

Pins git:20260813.0b13ecd in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
hashgraph-online/hol-guard
Path
integrations/claude-code-plugin/skills/setup/SKILL.md
Versions recorded
1
Latest version
git:20260813.0b13ecd, committed Aug 13, 2026
Size
1,770 bytes
Repository stars
940
License
Apache-2.0

Install or initialize HOL Guard local runtime protection for Claude Code. Use when the user explicitly asks to install, enable, set up, or repair HOL Guard.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Set up HOL Guard for Claude Code

HOL Guard is a separate open-source local runtime package. This plugin is the Claude Code discovery and setup companion; the actual security boundary is installed and maintained by the `hol-guard` CLI.

Follow this sequence exactly:

1. Check whether HOL Guard is already available without changing the machine:

   ```bash
   command -v hol-guard && hol-guard --version
   ```

2. If `hol-guard` is missing, explain that installation changes the user's Python/pipx environment and ask for explicit approval before installing it. Do not silently substitute another package manager.

3. After approval, install from PyPI with the documented command:

   ```bash
   pipx install hol-guard
   ```

   If `pipx` is unavailable, stop and show the user the install requirement. Do not curl or execute an unreviewed bootstrap script as a fallback.

4. Initialize Guard interactively:

   ```bash
   hol-guard init
   ```

   Do not add `--yes` unless the user explicitly requests unattended setup. `hol-guard init` owns Claude Code hook installation and avoids maintaining a second security implementation in this plugin.

5. Verify the resulting local protection:
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add hashgraph-online/hol-guard/setup@sha256:94f644ee1bc3cc93

The line at the top of this page pins the label git:20260813.0b13ecd, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_oo5dbpa5mih4ff3c.svg)](https://markdownregistry.com/a/art_oo5dbpa5mih4ff3c)

5 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Aug 13, 2026.

versioncommittedcommitsizeaudit
git:20260813.0b13ecd latest2026-08-13 0b13ecd 1,770 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (1770 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

hashgraph-online/hol-guard · 940 stars · license Apache-2.0 · pushed 2026-10-20 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_oo5dbpa5mih4ff3c
GET https://markdownregistry.com/api/v1/resolve?ref=hashgraph-online/hol-guard/setup
GET https://markdownregistry.com/api/v1/blob/94f644ee1bc3cc93a50b6da014b5f6eaa4c2fd0055c42e96f1f2e67e51418ad0

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hashgraph-online/hol-guard

hol-guard SKILL.md skill
hashgraph-online/hol-guard · .factory/skills/hol-guard/SKILL.md · Run HOL Guard scanner and guard operations via `uv run hol-guard`. Use when the user asks to scan plugins/MCP/skills…
git:20260608.71a64ac · audit A · 940 stars
AGENTS.md AGENTS.md file
hashgraph-online/hol-guard · AGENTS.md
git:20261019.9e8456a · audit A · 940 stars
DESIGN.md@dashboard DESIGN.md file
hashgraph-online/hol-guard · dashboard/DESIGN.md · Calm operational controls for local protection decisions.
git:20261007.f2f76d6 · audit A · 940 stars
hol-guard-protection SKILL.md skill
hashgraph-online/hol-guard · docs/guard/SKILL.md · Use HOL Guard to preview and protect AI-agent package installs, Cursor surfaces, CI, and automation workflows.
git:20260928.d61ff00 · audit A · 940 stars
status SKILL.md skill
hashgraph-online/hol-guard · integrations/claude-code-plugin/skills/status/SKILL.md · Check HOL Guard local protection status for Claude Code without changing configuration. Use when the user asks whether…
git:20260813.0b13ecd · audit A · 940 stars
example-skill SKILL.md skill
hashgraph-online/hol-guard · tests/fixtures/claude-plugin-good/skills/example/SKILL.md · Example Claude skill
git:20260407.14f40be · audit B · 940 stars
example SKILL.md skill
hashgraph-online/hol-guard · tests/fixtures/good-plugin/skills/example/SKILL.md · An example skill that does things with clear provenance, taxonomy, and metadata for trust scoring.
git:20260831.77d0795 · audit A · 940 stars
malicious SKILL.md skill
hashgraph-online/hol-guard · tests/fixtures/hermes-plugin-evil/skills/security/malicious/SKILL.md · Fixture that tries to exfiltrate SSH keys and environment secrets.
v1.0.0 · audit B · 940 stars
sneaky SKILL.md skill
hashgraph-online/hol-guard · tests/fixtures/hermes-plugin-evil/skills/stealth/sneaky/SKILL.md · Looks benign but has malicious subdirectory files.
v1.0.0 · audit A · 940 stars
benign SKILL.md skill
hashgraph-online/hol-guard · tests/fixtures/hermes-plugin-evil/skills/utils/benign/SKILL.md · A completely safe skill with no risk signals.
v1.0.0 · audit A · 940 stars
using-demo SKILL.md skill
hashgraph-online/hol-guard · tests/fixtures/kimi-plugin-good/skills/using-demo/SKILL.md · Recall project context.
git:20260817.d7b29c2 · audit B · 940 stars
example SKILL.md skill
hashgraph-online/hol-guard · tests/fixtures/multi-plugin-repo/plugins/alpha-plugin/skills/example/SKILL.md · Example repository plugin skill.
git:20260404.8427580 · audit B · 940 stars

Every file in hashgraph-online/hol-guard

Other files named setup

setup SKILL.md skill
garrytan/gbrain · plugin/skills/setup/SKILL.md · Add keyless GBrain memory to an existing agent, or connect a hosted brain while preserving identity and configuration
git:20261010.47d0faf · audit A · 31,074 stars
setup SKILL.md skill
nanocoai/nanoclaw · .claude/skills/setup/SKILL.md · Run initial NanoClaw setup. Use when user wants to install NanoClaw, configure it, or go through first-time setup…
git:20260606.14dba9b · audit A · 30,979 stars
setup SKILL.md skill
garrytan/gbrain · skills/setup/SKILL.md · Add keyless GBrain memory to an existing agent, or connect a hosted brain while preserving identity and configuration
git:20261007.590bb9a · audit A · 31,074 stars
setup SKILL.md skill
tencent/teamai-cli · skill-data/setup/SKILL.md · TeamAI day 0 and repo lifecycle: create a team repo as admin, join an existing team as a member, manage members, roles…
git:20261014.a1f4e73 · audit A · 5,609 stars
setup SKILL.md skill
alsk1992/cloddsbot · src/skills/bundled/setup/SKILL.md · Setup Wizard — Configure environment for all skills
git:20260208.767d1d8 · audit A · 2,990 stars
setup SKILL.md skill
feder-cr/invisible_playwright_mcp · skills/setup/SKILL.md · What the invisible_playwright_mcp browser server needs on this machine - the patched Firefox it drives, which the…
git:20260923.a602cff · audit B · 1,345 stars
setup Cursor rule
sipyourdrink-ltd/bernstein · .cursor/rules/setup.mdc · Setup
git:20260521.b455a7c · audit A · 1,310 stars
setup SKILL.md skill
fcakyon/claude-codex-settings · plugins/overleaf-skills/skills/setup/SKILL.md · This skill should be used when user asks to "set up overleaf", "configure overleaf cookie", "overleaf auth failed"…
git:20260502.ad8603b · audit A · 1,181 stars

Browse by kind, by grade A, or by owner.