hol-guard
Open-source antivirus protection for AI agents, blocking risky tools and malicious behaviors.
- Type
- MCP
- Open source
- Yes
- GitHub Stars
- ★ 1.0k
- Source
- mcp-github
- Repository
- github.com/hashgraph-online/hol-guard
Overview
HOL Guard is an open-source AI agent antivirus solution that blocks risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. It detects and prevents potential security threats by reviewing agent operations such as shell commands, file access, package installations, and MCP tool calls. HOL Guard runs locally without requiring an account and provides a CLI and local dashboard for managing protection policies, resolving approval issues, and reviewing decision history. Optional Guard Cloud offers shared history, team policies, and device management features.
Capabilities
- ▪Blocks risky tools and malicious packages
- ▪Prevents secret exposure and destructive operations
- ▪Detects prompt injection and supply chain risks
- ▪Supports multiple AI agents and MCP servers
Use cases
Setup
pipx install hol-guard && hol-guard init
This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.
FAQ
Which AI agents does HOL Guard support?
Supports multiple AI agents including Codex, Claude Code, GitHub Copilot CLI, and more.
How do I update HOL Guard?
Use the command `hol-guard update` to update your existing installation.
Related skills
arena-skill
Optimizes AI-generated answers by having 100 sub-agents compete.
sast-skills
Transform your AI coding assistant into a SAST scanner to automatically detect vulnerabilities in code.
Lightswind-UI-Library
AI-native CLI-first React component library with MCP Server support.
scientific-agent-skills
Transform any AI agent into a scientific assistant with 147 ready-to-use research skills.
susi_alexa_skill
A skill that enables question-and-answer interactions between Alexa and Susi AI.
claude-context
Provides code search capabilities for Claude Code, turning the entire codebase into context.