Check HOL Guard local protection status for Claude Code without changing configuration.

Apache-2.0Auto-check passedSecurity

Install Status

skills CLI
$ npx skills add hashgraph-online/hol-guard --skill status -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install hashgraph-online/hol-guard status --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/hashgraph-online/hol-guard.git skills-src && mkdir -p .claude/skills && cp -r skills-src/integrations/claude-code-plugin/skills/status .claude/skills/status && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
status
GitHub stars
815
Token cost
~231 tokens
SKILL.md length
83 words
Files
1
Skills in repo
4
Repo updated
First seen
Licence
Apache-2.0

At a glance

Check HOL Guard local protection status for Claude Code without changing configuration.

  • Works in 4 steps: Confirm the CLI exists → If present, report the installed version… → Summarize only what the CLI proves.… → …
  • The user asks whether Guard is installed
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Protecting Claude Code

What it does

Status is an agent skill from hashgraph-online/hol-guard. Check HOL Guard local protection status for Claude Code without changing configuration. Use when the user asks whether Guard is installed, active, healthy, or protecting Claude Code.

Its SKILL.md is about 230 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Prompt injection and agent security. It works with Model Context Protocol. The repository describes itself as: Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. The licence is Apache-2.0.

When your agent uses it

  • The user asks whether Guard is installed
  • Protecting Claude Code

Example prompts

  • “/status”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Confirm the CLI exists
  2. If present, report the installed version and current protection state
  3. Summarize only what the CLI proves. Distinguish active local protection from optional Guard Cloud connectivity.
  4. If Guard reports degraded or missing Claude Code protection, suggest running /hol-guard:setup. Do not claim that having this Claude plugin…

What it can do on your machine

Read from SKILL.md and the folder at commit a59ab66. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Status loads about 231 tokens when it runs. Until then it costs about 47 tokens; SKILL.md has 83 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~47
When it runs · the whole SKILL.md, loaded when a task matches
~231

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from hashgraph-online/hol-guard at commit a59ab66, republished under its Apache-2.0 licence (© hashgraph-online). 83 words, ~231 tokens.

Download SKILL.mdSave it as .claude/skills/status/SKILL.md (or your agent's skills folder).
name
status
description
Check HOL Guard local protection status for Claude Code without changing configuration. Use when the user asks whether Guard is installed, active, healthy, or protecting Claude Code.
disable-model-invocation
true

Check HOL Guard status

Perform read-only checks first. Do not repair, install, reconnect, or change policy unless the user separately asks for that action.

  1. Confirm the CLI exists:

    bash
    command -v hol-guard
  2. If present, report the installed version and current protection state:

    bash
    hol-guard --version
    hol-guard status
  3. Summarize only what the CLI proves. Distinguish active local protection from optional Guard Cloud connectivity.

  4. If Guard reports degraded or missing Claude Code protection, suggest running /hol-guard:setup. Do not claim that having this Claude plugin installed means runtime protection is active.

© hashgraph-online, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in integrations/claude-code-plugin/skills/status of hashgraph-online/hol-guard.

Open the folder on GitHubat commit a59ab66

Compare with similar skills

Status next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Status compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Status this skillhashgraph-online/hol-guard815—~231Automated safety check: PassApache-2.0
Forensifyalexgreensh/repo-forensics188—~2.5kAutomated safety check: NotesCustom licence
Plugin Scanneriflytek/skillhub5.2k2 repos~1.1kAutomated safety check: NotesApache-2.0
Security GuidejnMetaCode/shellward140—~644Automated safety check: WarnApache-2.0
Agent Security AuditOWASP/secure-agent-playbook187—~542Automated safety check: PassCC-BY-4.0
Safety Scanruvnet/ruflo74k—~409Automated safety check: NotesMIT

Similar skills

  • Forensify

    alexgreensh/repo-forensics

    Cross-agent self-inspection of your AI-agent stack. An agent skill from alexgreensh/repo-forensics.

    188 GitHub stars~2.5k tokensUpdated 11 days ago
    SecurityAuto-check: notes
  • Plugin Scanner

    iflytek/skillhub

    Scan AI agent skills, plugins, MCP servers, and agent tooling for prompt injection, unsafe commands, secret exposure, and supply-chain risks before installing or trusting them.

    5.2k GitHub starsUsed in 2 repos~1.1k tokens
    SecurityAuto-check: notes
  • Security Guide

    jnMetaCode/shellward

    OpenClaw 安全部署指南 / Security deployment guide — help users secure their OpenClaw installation

    140 GitHub stars~644 tokensUpdated 9 days ago
    SecurityAuto-check: warnings
  • Agent Security Audit

    OWASP/secure-agent-playbook

    Audit AI agent configurations for security risks — excessive permissions, prompt injection surfaces, data exfiltration paths, and missing guardrails.

    187 GitHub stars~542 tokensUpdated 13 days ago
    SecurityAuto-check passed
  • Safety Scan

    ruvnet/ruflo

    Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

    74k GitHub stars~409 tokensUpdated today
    SecurityAuto-check: notes
  • Hunt MCP

    Encod3d-Sec/TORCH

    MCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta.

    329 GitHub stars~1.4k tokensUpdated 1 mo ago
    SecurityAuto-check passed

More from hashgraph-online/hol-guard

  • Hol Guard

    hashgraph-online/hol-guard

    Run HOL Guard scanner and guard operations via uv run hol-guard.

    815 GitHub stars~542 tokensUpdated today
    Auto-check passed
  • Setup

    hashgraph-online/hol-guard

    Install or initialize HOL Guard local runtime protection for Claude Code.

    815 GitHub stars~443 tokensUpdated today
    Auto-check passed
  • Hol Guard Protection

    hashgraph-online/hol-guard

    Use HOL Guard to preview and protect AI-agent package installs, Cursor surfaces, CI, and automation workflows.

    815 GitHub stars~605 tokensUpdated today
    Auto-check passed

Categories

Questions about Status

What does Status do?

Check HOL Guard local protection status for Claude Code without changing configuration. Status is an agent skill from hashgraph-online/hol-guard. Check HOL Guard local protection status for Claude Code without changing configuration.

When should I use Status?

Status fits situations like: the user asks whether Guard is installed; protecting Claude Code.

How do I install Status in Claude Code?

Run `npx skills add hashgraph-online/hol-guard --skill status -a claude-code`. Or copy the skill folder (integrations/claude-code-plugin/skills/status in hashgraph-online/hol-guard) into .claude/skills/status in your project. Claude Code loads it when a task matches its description.

How do I install Status in Codex?

Run `npx skills add hashgraph-online/hol-guard --skill status -a codex`. Or copy the skill folder (integrations/claude-code-plugin/skills/status in hashgraph-online/hol-guard) into .agents/skills/status in your project. Codex loads it when a task matches its description.

Can I use Status in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add hashgraph-online/hol-guard --skill status -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/status, .gemini/skills/status, .github/skills/status and .opencode/skills/status in your project.

What does Status need to run?

SKILL.md names no scripts, command-line tools or credentials: Status is instructions for the agent only.

Does Status access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Status safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Status use?

Status is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Status use?

About 231 tokens (SKILL.md is roughly 924 characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Status?

Skills that share tags, products or a category with Status: Forensify (alexgreensh/repo-forensics, 188 stars), Plugin Scanner (iflytek/skillhub, 5.2k stars), Security Guide (jnMetaCode/shellward, 140 stars) and Agent Security Audit (OWASP/secure-agent-playbook, 187 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Status?

hashgraph-online (a GitHub organization) maintains it in hashgraph-online/hol-guard, which has 815 GitHub stars. The repository holds 4 skills in this directory. The repository was last updated on October 8, 2026.

Source: hashgraph-online/hol-guard on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.