HOL Guard
Your coding agent asks first before touching secrets, shell or new installs
✦ 关于 HOL Guard
HOL Guard is local-first runtime control for AI coding agents such as Claude Code, Codex and Cursor. It runs on your computer, lets routine work continue, and stops to ask when an agent goes for something sensitive: reading a secrets or credentials file, running a destructive shell command, using an MCP tool or server it has not seen before, or installing a package you did not expect. You allow or deny that one action, and Guard keeps a local record of the decision. The core is open source (Apache-2.0); an optional paid Guard Cloud adds shared history and team policy, so pricing is freemium. Scope: HOL Guard is not a gateway, not a network firewall and not a complete prompt-injection defense, and a scan result is not a guarantee of safety. Install: pipx install hol-guard && hol-guard init