agent-kit releases

Current version 6.1.1. Each version below is listed with the date HOL first saw it in the registry and what the catalog reported for it: supported runtimes, what it ships, its Trust Score and scan result.

Versions

  1. 6.12.0

    First seen by HOL

    What changed

    • Added Agent Plugin support
    • 39 skills → 47 skills
    • Trust Score 92 → 95
    • Scan findings 39 → 3
    • New finding areas: best-practices and operational-security
    • Cleared finding areas: skill-security
    Runtimes
    Agent Plugin, Claude Code, Codex, Cursor
    Ships
    47 skills, 0 MCP servers, 0 apps
    Trust Score
    95 / 100
    Scan result
    No findings at scan time, 3 findings
    Attestation
    No signed release attestation published
    Source commit
    655944879915
  2. 6.1.1

    First seen by HOL · registry updated

    First version HOL recorded for this plugin, so there is nothing earlier to compare.

    Runtimes
    Claude Code, Codex, Cursor
    Ships
    39 skills, 0 MCP servers, 0 apps
    Trust Score
    92 / 100
    Scan result
    No findings at scan time, 39 findings
    Attestation
    No signed release attestation published
    Source commit
    37e603dc1b07

Release integrity

What each channel served for agent-kit the last time HOL checked. A digest is the start of the build's SHA-256 or, for a source repository, the commit's git tree hash. Different values mean different content; they do not say which one is right.

Channels serving agent-kit
ChannelVersionDigestProvenanceSeen
Source repository (HOL scan)6.12.00cea14fa756bcommit 655944879915

No integrity events recorded.

How HOL records release integrity

How this is recorded

HOL checks the registry once a day, so a version replaced within a day may not appear, and versions published before 24 October 2026 are not listed. The facts are what the registry reported, not a signed statement from the author. A checked release is different: the author's release workflow scanned it, checked it with the Plugin Kit and signed the result with a GitHub attestation. It does not mean the plugin is free of vulnerabilities. See how the Trust Score is computed or go back to agent-kit.