plugin-scanner 2.0.1073__tar.gz → 2.0.1075__tar.gz

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/.github/workflows/publish.yml

@@ -119,11 +119,6 @@ jobs:
           path = Path("pyproject.toml")
           text = path.read_text(encoding="utf-8")
           text = text.replace('name = "hol-guard"', 'name = "hol-guard"', 1)
-          text = text.replace(
-              'description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."',
-              'description = "Protect local AI harnesses with HOL Guard before tools run in Codex, Claude Code, Cursor, Gemini, and OpenCode."',
-              1,
-          )
           start = text.index("[project.scripts]")
           end = text.index("\n\n[project.urls]")
           scripts = "[project.scripts]\n" \
@@ -138,16 +133,21 @@ jobs:
         run: |
           cp pyproject.toml pyproject.toml.bak
           python3 - <<'PY'
+          import re
           from pathlib import Path
 
           path = Path("pyproject.toml")
           text = path.read_text(encoding="utf-8")
           text = text.replace('name = "hol-guard"', 'name = "plugin-scanner"', 1)
-          text = text.replace(
-              'description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."',
+          text, description_count = re.subn(
+              r'^description = ".*"$',
               'description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."',
-              1,
+              text,
+              count=1,
+              flags=re.MULTILINE,
           )
+          if description_count != 1:
+              raise RuntimeError("Expected one project description in pyproject.toml")
           start = text.index("[project.scripts]")
           end = text.index("\n\n[project.urls]")
           scripts = "[project.scripts]\n" \

plugin_scanner-2.0.1073/README.md → plugin_scanner-2.0.1075/PKG-INFO

@@ -1,4 +1,52 @@
-# HOL Guard
+Metadata-Version: 2.4
+Name: plugin-scanner
+Version: 2.0.1075
+Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
+Project-URL: Homepage, https://hol.org/guard
+Project-URL: Documentation, https://github.com/hashgraph-online/hol-guard/tree/main/docs/guard
+Project-URL: Repository, https://github.com/hashgraph-online/hol-guard
+Project-URL: Issues, https://github.com/hashgraph-online/hol-guard/issues
+Project-URL: Changelog, https://github.com/hashgraph-online/hol-guard/releases
+Author-email: HOL <support@hol.org>
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: ai agent security,ai agents,ai antivirus,claude,cli,codex,cursor,gemini,mcp security,opencode,plugin security,prompt injection,runtime security,secrets detection,supply chain security
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.10
+Requires-Dist: cisco-ai-skill-scanner~=2.0.11; python_version < '3.14'
+Requires-Dist: cryptography>=49.0.0
+Requires-Dist: keyring>=25.0
+Requires-Dist: mcp<2,>=1.27.0; python_version >= '3.10'
+Requires-Dist: packaging>=24.0
+Requires-Dist: requests<3,>=2.32
+Requires-Dist: rich<15,>=14.0
+Requires-Dist: tomli>=2.0; python_version < '3.11'
+Provides-Extra: cisco
+Requires-Dist: litellm==1.91.3; (python_version >= '3.11' and python_version < '3.14') and extra == 'cisco'
+Provides-Extra: dev
+Requires-Dist: basedpyright>=1.39.8; extra == 'dev'
+Requires-Dist: build>=1.5.0; extra == 'dev'
+Requires-Dist: jsonschema>=4.26.0; extra == 'dev'
+Requires-Dist: pytest-cov>=7.1.0; extra == 'dev'
+Requires-Dist: pytest>=9.0.3; extra == 'dev'
+Requires-Dist: pyyaml>=6.0.3; extra == 'dev'
+Requires-Dist: ruff>=0.15.15; extra == 'dev'
+Provides-Extra: publish
+Requires-Dist: twine>=6.2.0; extra == 'publish'
+Description-Content-Type: text/markdown
+
+# HOL Guard: Open-Source Antivirus for AI Agents
 
 [![HOL Guard Version](https://img.shields.io/pypi/v/hol-guard.svg?logo=pypi&logoColor=white&cacheSeconds=300)](https://pypi.org/project/hol-guard/)
 [![Plugin Scanner Version](https://img.shields.io/pypi/v/plugin-scanner.svg?logo=pypi&logoColor=white&cacheSeconds=300)](https://pypi.org/project/plugin-scanner/)
@@ -13,23 +61,60 @@
 [![GitHub Stars](https://img.shields.io/github/stars/hashgraph-online/hol-guard?style=social)](https://github.com/hashgraph-online/hol-guard/stargazers)
 [![Lint: ruff](https://img.shields.io/badge/lint-ruff-D7FF64.svg)](https://github.com/astral-sh/ruff)
 
-| ![HOL whole dark logo](https://hol.org/brand/Logo_Whole_Dark.png) | **Protect your harness locally with `hol-guard`.** Use `plugin-scanner` when you need maintainer and CI checks for plugins, skills, MCP servers, and marketplace packages.<br><br>[PyPI Package (`hol-guard`)](https://pypi.org/project/hol-guard/)<br>[PyPI Package (`plugin-scanner`)](https://pypi.org/project/plugin-scanner/)<br>[HOL Plugin Registry](https://hol.org/registry/plugins)<br>[HOL GitHub Organization](https://github.com/hashgraph-online)<br>[Report an Issue](https://github.com/hashgraph-online/hol-guard/issues) |
+| ![HOL whole dark logo](https://hol.org/brand/Logo_Whole_Dark.png) | **Stop risky AI actions before they compromise your machine.** HOL Guard is a local-first security layer for AI agents, tools, plugins, skills, MCP servers, and package installs.<br><br>[Install HOL Guard](https://hol.org/guard/activate)<br>[Read the documentation](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/get-started.md)<br>[PyPI Package (`hol-guard`)](https://pypi.org/project/hol-guard/)<br>[Report an Issue](https://github.com/hashgraph-online/hol-guard/issues) |
 | :--- | :--- |
 
-## Start Here
+HOL Guard brings antivirus-style runtime protection to AI agents. It evaluates supported agent actions and local artifacts for secret exposure, prompt injection, unsafe commands, malicious packages, and MCP risks. Guard can allow safe work, block known threats, pause ambiguous actions for approval, and record security receipts for later review.
 
-| If you want to... | Install | Start with |
-| :--- | :--- | :--- |
-| protect Codex, Claude Code, Copilot CLI, Hermes, Cursor, Gemini, OpenCode, Pi, or ZCode before tools run | `hol-guard` | `hol-guard start` |
-| lint and verify packages in CI before release | `plugin-scanner` | `plugin-scanner verify .` |
+Use HOL Guard locally without a cloud account. Connect Guard Cloud when you want synchronized evidence, team policies, fleet visibility, and shared approval workflows.
 
-## Guard Quickstart
+## Install HOL Guard
 
 ```bash
 pipx install hol-guard
 hol-guard init
 ```
 
+`hol-guard init` discovers compatible AI agents, explains each setup change before applying it, and guides you through your first protected action.
+
+[Install guide](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/get-started.md) · [Supported agents](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/harness-support.md) · [Local vs. cloud](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/local-vs-cloud.md) · [Security policy](https://github.com/hashgraph-online/hol-guard/blob/main/SECURITY.md)
+
+## What HOL Guard Protects
+
+| Threat surface | Guard protection |
+| :--- | :--- |
+| **Agent tool calls** | Evaluates supported shell, file, MCP, prompt, and tool-result events through native hooks, managed proxies, or reversible launch overlays. |
+| **Secrets and credentials** | Detects sensitive file access, credential-shaped output, staged exfiltration, and suspicious outbound commands. |
+| **AI supply chain** | Reviews package installs, plugins, skills, MCP servers, hooks, and agent configuration before trust is granted. |
+| **Prompt injection** | For adapters that expose prompt events, screens prompt and tool intent for instructions that attempt to expose secrets, evade controls, or trigger destructive behavior. |
+| **Human approval** | Routes ambiguous actions to native prompts, the local approval center, or Guard Cloud according to the active policy. |
+| **Security evidence** | Records attributable receipts and inventory changes so decisions can be reviewed, explained, and synchronized. |
+
+Guard prefers the strongest integration each agent exposes. Enforcement depth varies by agent and event type; see the [support matrix](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/harness-support.md) for the exact current contract.
+
+## Supported AI Agents
+
+HOL Guard currently integrates with Codex, Claude Code, GitHub Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCode, Antigravity, Kimi Code, Grok, Pi / oh-my-pi, and ZCode.
+
+These developer agents are Guard's deepest integrations today, but the product boundary is broader: the same policy, supply-chain, approval, and evidence layers are designed to protect AI agents and their local tool ecosystems as new adapters are added.
+
+## Why HOL Guard
+
+Most security tools see only one part of an AI agent's attack surface. Code scanners run after files change. Sandboxes constrain a process but do not understand agent intent. MCP gateways see MCP traffic but not local shell commands, package installs, skills, hooks, or agent configuration.
+
+HOL Guard combines those signals at the local runtime boundary. It discovers the agent and its tools, evaluates supported actions against one policy, requests human approval only when needed, and records the resulting decision. The goal is practical protection without turning ordinary AI-assisted work into a stream of prompts.
+
+## Choose the Right Package
+
+| If you want to... | Install | Start with |
+| :--- | :--- | :--- |
+| protect AI agents and their local runtime | `hol-guard` | `hol-guard init` |
+| lint and verify plugins, skills, MCP servers, and marketplace packages in CI | `plugin-scanner` | `plugin-scanner verify .` |
+
+`hol-guard` is the end-user antivirus and runtime protection product. `plugin-scanner` is the maintainer and CI companion for analyzing agent ecosystem packages before release.
+
+## Guard Operations
+
 To update an existing pipx install from PyPI:
 
 ```bash
@@ -81,11 +166,14 @@ pipx run hol-guard supply-chain sync
 pipx run hol-guard supply-chain scan
 pipx run hol-guard supply-chain explain minimist@1.2.5 --ecosystem npm
 pipx run hol-guard explain install-connect
+pipx run hol-guard command test 'git reset --hard HEAD~1'
+pipx run hol-guard command explain 'grep "rm -rf|git clean" README.md'
+pipx run hol-guard command extensions
 ```
 
 What you get from Guard:
 
-- Detects local harness config on your machine
+- Detects supported AI agent configuration on your machine
 - Records a baseline before you trust a tool
 - Pauses cleanly on new or changed artifacts before launch
 - Queues blocked changes in a localhost approval center when the harness cannot prompt inline
@@ -94,6 +182,22 @@ What you get from Guard:
 
 See [docs/guard/get-started.md](docs/guard/get-started.md) for the full local flow.
 
+### Inspect command protection without running it
+
+Command safety extensions make Guard's existing shell, Git, filesystem, data-protection, container, Kubernetes,
+encoded-execution, and self-protection behavior inspectable. They are built-in capability boundaries over the same
+parser used by harness hooks, not downloadable regex bundles.
+
+Use `command test` for a concise classification and `command explain` for the complete evaluation trace. Both are
+side-effect free: they do not execute the command, evaluate final policy, create an approval, or record a receipt.
+Use `--json` for a stable automation contract.
+
+```bash
+hol-guard command test 'rm -rf ./build'
+hol-guard command explain 'grep "rm -rf|git clean" README.md'
+hol-guard command extensions command.shell-mutations --json
+```
+
 <details>
 <summary>Guard commands at a glance</summary>
 
@@ -155,7 +259,7 @@ See [docs/guard/get-started.md](docs/guard/get-started.md) for the full local fl
 
 ## Guard: Protection Levels
 
-HOL Guard is antivirus for AI harnesses. It intercepts every tool action before your files change or your network is contacted, then decides in milliseconds whether to allow or block.
+HOL Guard is antivirus for AI agents. It evaluates supported runtime events and local artifacts, then applies the active policy before execution where the agent provides a pre-action boundary. Other integrations use native approval, managed proxy, launch-time, or post-action evidence surfaces according to the [support matrix](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/harness-support.md).
 
 Choose a protection level with `hol-guard settings set security-level <level>`:
 

plugin_scanner-2.0.1073/PKG-INFO → plugin_scanner-2.0.1075/README.md

@@ -1,50 +1,4 @@
-Metadata-Version: 2.4
-Name: plugin-scanner
-Version: 2.0.1073
-Summary: Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi.
-Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
-Project-URL: Repository, https://github.com/hashgraph-online/hol-guard
-Project-URL: Issues, https://github.com/hashgraph-online/hol-guard/issues
-Author-email: HOL <support@hol.org>
-License-Expression: Apache-2.0
-License-File: LICENSE
-Keywords: claude,cli,codex,ecosystem,gemini,mcp,opencode,pi,plugin,scanner,security
-Classifier: Development Status :: 5 - Production/Stable
-Classifier: Environment :: Console
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: Apache Software License
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
-Classifier: Programming Language :: Python :: 3.14
-Classifier: Topic :: Security
-Classifier: Topic :: Software Development :: Quality Assurance
-Requires-Python: >=3.10
-Requires-Dist: cisco-ai-skill-scanner~=2.0.11; python_version < '3.14'
-Requires-Dist: cryptography>=49.0.0
-Requires-Dist: keyring>=25.0
-Requires-Dist: mcp<2,>=1.27.0; python_version >= '3.10'
-Requires-Dist: packaging>=24.0
-Requires-Dist: requests<3,>=2.32
-Requires-Dist: rich<15,>=14.0
-Requires-Dist: tomli>=2.0; python_version < '3.11'
-Provides-Extra: cisco
-Requires-Dist: litellm==1.91.3; (python_version >= '3.11' and python_version < '3.14') and extra == 'cisco'
-Provides-Extra: dev
-Requires-Dist: basedpyright>=1.39.8; extra == 'dev'
-Requires-Dist: build>=1.5.0; extra == 'dev'
-Requires-Dist: jsonschema>=4.26.0; extra == 'dev'
-Requires-Dist: pytest-cov>=7.1.0; extra == 'dev'
-Requires-Dist: pytest>=9.0.3; extra == 'dev'
-Requires-Dist: pyyaml>=6.0.3; extra == 'dev'
-Requires-Dist: ruff>=0.15.15; extra == 'dev'
-Provides-Extra: publish
-Requires-Dist: twine>=6.2.0; extra == 'publish'
-Description-Content-Type: text/markdown
-
-# HOL Guard
+# HOL Guard: Open-Source Antivirus for AI Agents
 
 [![HOL Guard Version](https://img.shields.io/pypi/v/hol-guard.svg?logo=pypi&logoColor=white&cacheSeconds=300)](https://pypi.org/project/hol-guard/)
 [![Plugin Scanner Version](https://img.shields.io/pypi/v/plugin-scanner.svg?logo=pypi&logoColor=white&cacheSeconds=300)](https://pypi.org/project/plugin-scanner/)
@@ -59,23 +13,60 @@ Description-Content-Type: text/markdown
 [![GitHub Stars](https://img.shields.io/github/stars/hashgraph-online/hol-guard?style=social)](https://github.com/hashgraph-online/hol-guard/stargazers)
 [![Lint: ruff](https://img.shields.io/badge/lint-ruff-D7FF64.svg)](https://github.com/astral-sh/ruff)
 
-| ![HOL whole dark logo](https://hol.org/brand/Logo_Whole_Dark.png) | **Protect your harness locally with `hol-guard`.** Use `plugin-scanner` when you need maintainer and CI checks for plugins, skills, MCP servers, and marketplace packages.<br><br>[PyPI Package (`hol-guard`)](https://pypi.org/project/hol-guard/)<br>[PyPI Package (`plugin-scanner`)](https://pypi.org/project/plugin-scanner/)<br>[HOL Plugin Registry](https://hol.org/registry/plugins)<br>[HOL GitHub Organization](https://github.com/hashgraph-online)<br>[Report an Issue](https://github.com/hashgraph-online/hol-guard/issues) |
+| ![HOL whole dark logo](https://hol.org/brand/Logo_Whole_Dark.png) | **Stop risky AI actions before they compromise your machine.** HOL Guard is a local-first security layer for AI agents, tools, plugins, skills, MCP servers, and package installs.<br><br>[Install HOL Guard](https://hol.org/guard/activate)<br>[Read the documentation](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/get-started.md)<br>[PyPI Package (`hol-guard`)](https://pypi.org/project/hol-guard/)<br>[Report an Issue](https://github.com/hashgraph-online/hol-guard/issues) |
 | :--- | :--- |
 
-## Start Here
+HOL Guard brings antivirus-style runtime protection to AI agents. It evaluates supported agent actions and local artifacts for secret exposure, prompt injection, unsafe commands, malicious packages, and MCP risks. Guard can allow safe work, block known threats, pause ambiguous actions for approval, and record security receipts for later review.
 
-| If you want to... | Install | Start with |
-| :--- | :--- | :--- |
-| protect Codex, Claude Code, Copilot CLI, Hermes, Cursor, Gemini, OpenCode, Pi, or ZCode before tools run | `hol-guard` | `hol-guard start` |
-| lint and verify packages in CI before release | `plugin-scanner` | `plugin-scanner verify .` |
+Use HOL Guard locally without a cloud account. Connect Guard Cloud when you want synchronized evidence, team policies, fleet visibility, and shared approval workflows.
 
-## Guard Quickstart
+## Install HOL Guard
 
 ```bash
 pipx install hol-guard
 hol-guard init
 ```
 
+`hol-guard init` discovers compatible AI agents, explains each setup change before applying it, and guides you through your first protected action.
+
+[Install guide](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/get-started.md) · [Supported agents](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/harness-support.md) · [Local vs. cloud](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/local-vs-cloud.md) · [Security policy](https://github.com/hashgraph-online/hol-guard/blob/main/SECURITY.md)
+
+## What HOL Guard Protects
+
+| Threat surface | Guard protection |
+| :--- | :--- |
+| **Agent tool calls** | Evaluates supported shell, file, MCP, prompt, and tool-result events through native hooks, managed proxies, or reversible launch overlays. |
+| **Secrets and credentials** | Detects sensitive file access, credential-shaped output, staged exfiltration, and suspicious outbound commands. |
+| **AI supply chain** | Reviews package installs, plugins, skills, MCP servers, hooks, and agent configuration before trust is granted. |
+| **Prompt injection** | For adapters that expose prompt events, screens prompt and tool intent for instructions that attempt to expose secrets, evade controls, or trigger destructive behavior. |
+| **Human approval** | Routes ambiguous actions to native prompts, the local approval center, or Guard Cloud according to the active policy. |
+| **Security evidence** | Records attributable receipts and inventory changes so decisions can be reviewed, explained, and synchronized. |
+
+Guard prefers the strongest integration each agent exposes. Enforcement depth varies by agent and event type; see the [support matrix](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/harness-support.md) for the exact current contract.
+
+## Supported AI Agents
+
+HOL Guard currently integrates with Codex, Claude Code, GitHub Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCode, Antigravity, Kimi Code, Grok, Pi / oh-my-pi, and ZCode.
+
+These developer agents are Guard's deepest integrations today, but the product boundary is broader: the same policy, supply-chain, approval, and evidence layers are designed to protect AI agents and their local tool ecosystems as new adapters are added.
+
+## Why HOL Guard
+
+Most security tools see only one part of an AI agent's attack surface. Code scanners run after files change. Sandboxes constrain a process but do not understand agent intent. MCP gateways see MCP traffic but not local shell commands, package installs, skills, hooks, or agent configuration.
+
+HOL Guard combines those signals at the local runtime boundary. It discovers the agent and its tools, evaluates supported actions against one policy, requests human approval only when needed, and records the resulting decision. The goal is practical protection without turning ordinary AI-assisted work into a stream of prompts.
+
+## Choose the Right Package
+
+| If you want to... | Install | Start with |
+| :--- | :--- | :--- |
+| protect AI agents and their local runtime | `hol-guard` | `hol-guard init` |
+| lint and verify plugins, skills, MCP servers, and marketplace packages in CI | `plugin-scanner` | `plugin-scanner verify .` |
+
+`hol-guard` is the end-user antivirus and runtime protection product. `plugin-scanner` is the maintainer and CI companion for analyzing agent ecosystem packages before release.
+
+## Guard Operations
+
 To update an existing pipx install from PyPI:
 
 ```bash
@@ -127,11 +118,14 @@ pipx run hol-guard supply-chain sync
 pipx run hol-guard supply-chain scan
 pipx run hol-guard supply-chain explain minimist@1.2.5 --ecosystem npm
 pipx run hol-guard explain install-connect
+pipx run hol-guard command test 'git reset --hard HEAD~1'
+pipx run hol-guard command explain 'grep "rm -rf|git clean" README.md'
+pipx run hol-guard command extensions
 ```
 
 What you get from Guard:
 
-- Detects local harness config on your machine
+- Detects supported AI agent configuration on your machine
 - Records a baseline before you trust a tool
 - Pauses cleanly on new or changed artifacts before launch
 - Queues blocked changes in a localhost approval center when the harness cannot prompt inline
@@ -140,6 +134,22 @@ What you get from Guard:
 
 See [docs/guard/get-started.md](docs/guard/get-started.md) for the full local flow.
 
+### Inspect command protection without running it
+
+Command safety extensions make Guard's existing shell, Git, filesystem, data-protection, container, Kubernetes,
+encoded-execution, and self-protection behavior inspectable. They are built-in capability boundaries over the same
+parser used by harness hooks, not downloadable regex bundles.
+
+Use `command test` for a concise classification and `command explain` for the complete evaluation trace. Both are
+side-effect free: they do not execute the command, evaluate final policy, create an approval, or record a receipt.
+Use `--json` for a stable automation contract.
+
+```bash
+hol-guard command test 'rm -rf ./build'
+hol-guard command explain 'grep "rm -rf|git clean" README.md'
+hol-guard command extensions command.shell-mutations --json
+```
+
 <details>
 <summary>Guard commands at a glance</summary>
 
@@ -201,7 +211,7 @@ See [docs/guard/get-started.md](docs/guard/get-started.md) for the full local fl
 
 ## Guard: Protection Levels
 
-HOL Guard is antivirus for AI harnesses. It intercepts every tool action before your files change or your network is contacted, then decides in milliseconds whether to allow or block.
+HOL Guard is antivirus for AI agents. It evaluates supported runtime events and local artifacts, then applies the active policy before execution where the agent provides a pre-action boundary. Other integrations use native approval, managed proxy, launch-time, or post-action evidence surfaces according to the [support matrix](https://github.com/hashgraph-online/hol-guard/blob/main/docs/guard/harness-support.md).
 
 Choose a protection level with `hol-guard settings set security-level <level>`:
 

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/docs/guard/get-started.md

@@ -128,6 +128,8 @@ For security reviews, sales conversations, and GRC packets, see the
 | I need to remove Guard from this machine | `hol-guard uninstall --self` | Can Guard disconnect its managed harnesses, remove package shims and local state, then uninstall itself cleanly? |
 | I need install/connect docs | `hol-guard explain install-connect` | Which local-first setup and optional cloud commands should I share? |
 | I need to preview one install before I run it | `hol-guard protect npm install <package> --dry-run` | Would Guard allow, warn, review, or block this exact install request right now? |
+| I need to understand command protection | `hol-guard command test '<command>'` or `hol-guard command explain '<command>'` | Which built-in command safety extension recognizes this command, and why, without executing it or creating Guard state? |
+| I need the command protection catalog | `hol-guard command extensions` | Which built-in command safety extensions and action classes are available in this Guard version? |
 | I need setup or runtime troubleshooting | `hol-guard doctor <harness>` | Why is this harness or Guard runtime not behaving correctly? |
 | A launch was blocked or changed | `hol-guard diff <harness>` | What changed since the last recorded snapshot? |
 | I need to resolve a queued block | `hol-guard approvals` | Which requests are waiting, and how do I approve or deny them? |

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/pyproject.toml

@@ -4,15 +4,31 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.1073"
-description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
+version = "2.0.1075"
+description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"
 requires-python = ">=3.10"
 authors = [
     { name = "HOL", email = "support@hol.org" },
 ]
-keywords = ["plugin", "scanner", "security", "mcp", "cli", "codex", "claude", "gemini", "opencode", "pi", "ecosystem"]
+keywords = [
+    "ai antivirus",
+    "ai agent security",
+    "ai agents",
+    "runtime security",
+    "mcp security",
+    "supply chain security",
+    "prompt injection",
+    "secrets detection",
+    "plugin security",
+    "cli",
+    "codex",
+    "claude",
+    "cursor",
+    "gemini",
+    "opencode",
+]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
     "Environment :: Console",
@@ -83,9 +99,11 @@ plugin-scanner = "codex_plugin_scanner.cli:main"
 plugin-ecosystem-scanner = "codex_plugin_scanner.cli:main"
 
 [project.urls]
-Homepage = "https://github.com/hashgraph-online/hol-guard"
+Homepage = "https://hol.org/guard"
+Documentation = "https://github.com/hashgraph-online/hol-guard/tree/main/docs/guard"
 Repository = "https://github.com/hashgraph-online/hol-guard"
 Issues = "https://github.com/hashgraph-online/hol-guard/issues"
+Changelog = "https://github.com/hashgraph-online/hol-guard/releases"
 
 [tool.ruff]
 target-version = "py310"

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/pyproject.toml.bak

@@ -4,15 +4,31 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.1073"
-description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
+version = "2.0.1075"
+description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"
 requires-python = ">=3.10"
 authors = [
     { name = "HOL", email = "support@hol.org" },
 ]
-keywords = ["plugin", "scanner", "security", "mcp", "cli", "codex", "claude", "gemini", "opencode", "pi", "ecosystem"]
+keywords = [
+    "ai antivirus",
+    "ai agent security",
+    "ai agents",
+    "runtime security",
+    "mcp security",
+    "supply chain security",
+    "prompt injection",
+    "secrets detection",
+    "plugin security",
+    "cli",
+    "codex",
+    "claude",
+    "cursor",
+    "gemini",
+    "opencode",
+]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
     "Environment :: Console",
@@ -85,9 +101,11 @@ plugin-guard = "codex_plugin_scanner.cli:main"
 plugin-ecosystem-scanner = "codex_plugin_scanner.cli:main"
 
 [project.urls]
-Homepage = "https://github.com/hashgraph-online/hol-guard"
+Homepage = "https://hol.org/guard"
+Documentation = "https://github.com/hashgraph-online/hol-guard/tree/main/docs/guard"
 Repository = "https://github.com/hashgraph-online/hol-guard"
 Issues = "https://github.com/hashgraph-online/hol-guard/issues"
+Changelog = "https://github.com/hashgraph-online/hol-guard/releases"
 
 [tool.ruff]
 target-version = "py310"

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/src/codex_plugin_scanner/cli.py

@@ -248,6 +248,7 @@ def _resolve_legacy_args(
         "preflight",
         "diff",
         "test-eval",
+        "command",
         "receipts",
         "history",
         "inventory",

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/src/codex_plugin_scanner/guard/cli/commands_dispatch_local.py

@@ -21,6 +21,31 @@ if TYPE_CHECKING:
 from ._commands_shared import *
 from .commands_parser_helpers import *
 
+def _run_guard_command_inspection_command(
+    args: argparse.Namespace,
+    *,
+    input_text: str | None = None,
+    output_stream: TextIO | None = None,
+) -> int:
+    from ..runtime.command_inspection import command_extensions_payload, inspect_command
+
+    command_command = str(getattr(args, "command_command", ""))
+    try:
+        if command_command == "extensions":
+            payload = command_extensions_payload(getattr(args, "extension_id", None))
+            _emit("command-extensions", payload, bool(getattr(args, "json", False)))
+            return 0
+        if command_command not in {"test", "explain"}:
+            print("Choose command test, command explain, or command extensions.", file=sys.stderr)
+            return 2
+        payload = inspect_command(str(getattr(args, "command_text", "")), cwd=Path.cwd(), home_dir=Path.home())
+    except ValueError as error:
+        print(f"Error: {error}", file=sys.stderr)
+        return 2
+    payload["mode"] = command_command
+    _emit("command-inspection", payload, bool(getattr(args, "json", False)))
+    return 0
+
 def _run_guard_scan_command(
     args: argparse.Namespace,
     *,
@@ -392,6 +417,7 @@ def _run_guard_mcp_command(
 __all__ = [
     "_run_guard_apps_command",
     "_run_guard_bootstrap_command",
+    "_run_guard_command_inspection_command",
     "_run_guard_dashboard_command",
     "_run_guard_detect_command",
     "_run_guard_init_command",

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/src/codex_plugin_scanner/guard/cli/commands_parser.py

@@ -51,7 +51,7 @@ def _configure_guard_parser(guard_parser: argparse.ArgumentParser) -> None:
         parser_class=FriendlyArgumentParser,
         metavar=(
             "{start,status,dashboard,init,apps,bootstrap,detect,install,update,uninstall,package-shims,run,protect,preflight,scan,diff,"
-            "test-eval,"
+            "test-eval,command,"
             "receipts,inventory,abom,aibom,approvals,explain,allow,deny,policies,trust,exceptions,advisories,events,doctor,connect,"
             "remote-pair,disconnect,"
             "login,sync,device,commands,bridge,mcp}"

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/src/codex_plugin_scanner/guard/cli/commands_parser_local.py

@@ -168,6 +168,28 @@ def _configure_guard_local_parsers(
     protect_parser.add_argument("--package-shim-ui", action="store_true", help=argparse.SUPPRESS)
     protect_parser.add_argument("protect_command", nargs=argparse.REMAINDER)
 
+    command_parser = guard_subparsers.add_parser(
+        "command",
+        help="Inspect commands and built-in command safety extensions without executing anything",
+    )
+    command_subparsers = command_parser.add_subparsers(dest="command_command", required=True, metavar="COMMAND")
+    for command_name in ("test", "explain"):
+        inspect_parser = command_subparsers.add_parser(
+            command_name,
+            help=f"{command_name.title()} how Guard classifies one shell command",
+        )
+        inspect_parser.add_argument(
+            "command_text",
+            help="Exact shell command to inspect; quote to preserve shell syntax",
+        )
+        inspect_parser.add_argument("--json", action="store_true")
+    extensions_parser = command_subparsers.add_parser(
+        "extensions",
+        help="List or inspect built-in command safety extensions",
+    )
+    extensions_parser.add_argument("extension_id", nargs="?")
+    extensions_parser.add_argument("--json", action="store_true")
+
     preflight_parser = guard_subparsers.add_parser(
         "preflight",
         help="Scan an artifact before you add it to a harness config or install path",

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/src/codex_plugin_scanner/guard/cli/commands_router.py

@@ -16,6 +16,7 @@ from ._commands_shared import *
 from .commands_parser_helpers import *
 
 _EARLY_HANDLERS = {
+    "command": "_run_guard_command_inspection_command",
     "scan": "_run_guard_scan_command",
     "preflight": "_run_guard_preflight_command",
     "mcp": "_run_guard_mcp_command",

{plugin_scanner-2.0.1073 → plugin_scanner-2.0.1075}/src/codex_plugin_scanner/guard/cli/commands_support_runtime_policy.py

@@ -14,6 +14,7 @@ if TYPE_CHECKING:
     from .commands_support_prompts import _prompt_request_classes, _prompt_requires_hard_block
 
 
+from ..runtime.command_extensions import risk_classes_for_command_action
 from ..store import _runtime_scoped_exact_match_key, runtime_tool_action_exact_match_context
 from ..text import ensure_terminal_punctuation as _ensure_terminal_punctuation
 from ._commands_shared import *
@@ -434,22 +435,7 @@ def _runtime_artifact_risk_classes(artifact: GuardArtifact) -> list[str]:
     action_class = artifact.metadata.get("action_class")
     if not isinstance(action_class, str):
         return []
-    action_risk_classes = {
-        "credential exfiltration shell command": [
-            "data_flow_exfiltration",
-            "credential_exfiltration",
-            "network_egress",
-        ],
-        "guard-managed config write": ["destructive_shell"],
-        "docker-sensitive command": ["network_egress", "destructive_shell"],
-        "docker client config access": ["local_secret_read"],
-        "encoded or encrypted shell command": ["encoded_execution"],
-        "kubernetes secret read command": ["local_secret_read"],
-        "shell file upload command": ["credential_exfiltration", "network_egress"],
-        "sensitive local file write": ["destructive_shell", "local_secret_read"],
-        "destructive shell command": ["destructive_shell"],
-    }
-    return action_risk_classes.get(action_class.strip().lower(), [])
+    return list(risk_classes_for_command_action(action_class))
 
 def _guard_settings_payload(config: GuardConfig) -> dict[str, object]:
     return {