O

Ontoly

0xsarwagya/ontoly · v0.1.0 · Development & Workflow

by 0xsarwagyaOwner verified

Deterministic Software Graph workflows for Codex: architecture review, dependency analysis, request tracing, configuration analysis, and impact analysis.

InstallSource
Follow0
Trust Score96Security scanPartialComponents1
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Ontoly a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • 1 skill

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Interactive, Read, Write
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and HOL plugin scan. See the evidence

What is Ontoly?

Ontoly is a published development & workflow plugin for AI coding agents in the Codex ecosystem, developed by 0xsarwagya and distributed through the HOL AI plugin registry. Deterministic Software Graph workflows for Codex: architecture review, dependency analysis, request tracing, configuration analysis, and impact analysis.

Canonical slug
0xsarwagya/ontoly
Version
v0.1.0 · updated Sep 20, 2026

Registry snapshot

Owner verification
Verified on HOL as @0xsarwagya
Scanner
Registry fallback scan
Security result
Partial scan
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
96

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
100/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/0xsarwagya/ontoly-codex-plugin
Source commit
04ee2a2e39f1…
Publisher verified
Yes
Owner verified
@0xsarwagya

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Partial scan
Security result
100
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan and HOL plugin scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
registry-broker-fallback
Grade
A · safe
Version
Unknown
cisco-skill-scanner: unknown

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install ontoly.

  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "ontoly",
  "version": "0.1.0",
  "description": "Use Ontoly Software Graph evidence, CLI reports, MCP, and Agent Skills for deterministic TypeScript codebase understanding.",
  "author": {
    "name": "0xsarwagya",
    "url": "https://github.com/0xsarwagya"
  },
  "homepage": "https://oss.sarwagya.wtf/ontoly",
  "repository": "https://github.com/0xsarwagya/ontoly-codex-plugin",
  "license": "MIT",
  "keywords": [
    "ontoly",
    "software-graph",
    "codebase-intelligence",
    "mcp",
    "agent-skills",
    "typescript",
    "codex"
  ],
  "skills": "./",
  "interface": {
    "displayName": "Ontoly",
    "developerName": "0xsarwagya",
    "shortDescription": "Use deterministic Software Graph evidence before searching source files",
    "longDescription": "Ontoly builds a deterministic Software Graph for TypeScript repositories. Use this plugin when Codex needs architecture review, dependency analysis, impact analysis, request tracing, configuration analysis, security ownership, or codebase onboarding backed by graph evidence and MCP capabilities.",
    "category": "Developer Tools",
    "capabilities": [
      "Interactive",
      "Read",
      "Write"
    ],
    "websiteURL": "https://oss.sarwagya.wtf/ontoly",
    "privacyPolicyURL": "https://github.com/0xsarwagya/ontoly-codex-plugin/blob/main/SECURITY.md",
    "termsOfServiceURL": "https://github.com/0xsarwagya/ontoly-codex-plugin/blob/main/LICENSE",
    "defaultPrompt": [
      "Explain this repository with Ontoly evidence",
      "Trace this request flow with Ontoly",
      "Find what depends on this service"
    ],
    "brandColor": "#111827",
    "screenshots": []
  },
  "registryIndexVersion": 5
}

Marketplace source

Repo URL
https://github.com/0xsarwagya/ontoly-codex-plugin
Marketplace path
Unknown
Source path
plugins/0xsarwagya/ontoly-codex-plugin
Install policy
AVAILABLE

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • ontoly-software-graph

    skills/ontoly-software-graph/SKILL.md

    Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files when reviewing architecture, dependencies, request flows, configuration, impact, or security-sensitive ownership.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

1,474 bytes

d3b546205a3edc83…

package-lock.json

file

280 bytes

7bcdde8c85a31c7e…

package.json

file

601 bytes

a0d5f85e023aed06…

README.md

file

2,326 bytes

f4ebc9d75ae95c15…

SECURITY.md

file

599 bytes

23daf2e12f1cd7b2…

skills/ontoly-software-graph/SKILL.md

skill

2,721 bytes

19feb860e384f281…

Ontoly — Frequently asked questions

What is Ontoly?
Ontoly is an AI plugin in the HOL registry. Deterministic Software Graph workflows for Codex: architecture review, dependency analysis, request tracing, configuration analysis, and impact analysis.
How do I install Ontoly?
Install Ontoly in your harness: Codex — codex plugin marketplace add 0xsarwagya/ontoly-codex-plugin; Any agent — npx [email protected] add 0xsarwagya/ontoly-codex-plugin. Full step-by-step guidance is on the HOL plugin page.
How do I install Ontoly in Codex?
To install Ontoly in Codex, start with codex plugin marketplace add 0xsarwagya/ontoly-codex-plugin. The complete step-by-step install guide for Codex is on the HOL plugin page.
How is the Trust Score for Ontoly computed?
Ontoly has a HOL Trust Score of 96 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/0xsarwagya%2Fontoly/trust
Who publishes Ontoly?
Ontoly is published by 0xsarwagya and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-06 to 2026-10-30.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Ontoly.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins