{"name":"io.github.hashgraph-online/hol-guard","slug":"hashgraph-online-hol-guard","title":"HOL Guard","description":"Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.","url":"https://mcp.market/server/hashgraph-online-hol-guard","rating":null,"grade":"C","score":60,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":45,"stars":626,"forks":73,"downloads_week":null,"last_push_at":"2026-09-19T00:20:52.000Z","license":"Apache-2.0"},"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/hashgraph-online/hol-guard","website":"https://hol.org/guard","version":"3.0.190","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"hol-guard","version":"3.0.190","runtimeHint":"uvx","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"},{"value":"serve","type":"positional"},{"value":"--stdio","type":"positional"}]}],"tools":[],"scan":{"score":60,"grade":"C","scanned_at":"2026-09-19T00:27:29.046Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:27:28.953Z","components":{"code":{"score":3,"max":25,"notes":["1500 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"net.raw-ip","severity":"medium","component":"code","title":"Network call to a raw IP address","evidence":"hol_guard-3.0.190/dashboard/src/approval-center-layout.test.ts: … request-layout-test\", approval_url: \"http://127.0.0.1:4781/approvals/request-layout-test\", status…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"hol_guard-3.0.190/dashboard/src/apps/app-catalog.ts: …key: \"encoded_execution\", example: \"eval(atob(...)) or base64-decoded shell paylo…"},{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"hol_guard-3.0.190/src/codex_plugin_scanner/guard/cli/commands_support_runtime_resolution.py: …ronment(server_config) launch_env = dict(os.environ) launch_env.update(configured_env) …"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"hol-guard","version":"3.0.190","found":true,"license":"Apache-2.0","dependencyCount":21,"publishedAt":"2026-09-18T14:03:02.863615Z","repositoryUrl":"https://github.com/hashgraph-online/hol-guard"}],"repo":{"found":true,"owner":"hashgraph-online","repo":"hol-guard","archived":false,"pushedAt":"2026-09-19T00:20:52Z","stars":626,"forks":73,"openIssues":99,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/160371962?v=4","ownerCreatedAt":"2024-02-18T02:34:33Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/160371962?v=4&s=128","source":"github"},"presence":{"stars":626,"forks":73,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-09-19T00:20:52.000Z","score":45}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 60: Whole environment serialized (possible credential exfil); Network call to a raw IP address; eval / new Function used","createdAt":"2026-09-19T00:27:29.564Z"}],"reviews":[]}