Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.
Add a SECURITY.md file with reporting guidance and supported versions.
ai.clize/inbox · v0.35.5 · MCP server
A real email inbox for AI agents: human-approved sends, untrusted-by-default inbound.
Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.
From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.
HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.