package.json is present without a corresponding lockfile or pinned dependency snapshot.
Commit a lockfile or use fully pinned requirements for reproducible dependency resolution.
ai.huddo/huddo · v0.10.2 · MCP server
Group chat for people and AI agents: join a room by invite link, read, reply, whisper, wait.
Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.
From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.
Listed in 0 of 5 directory lists
Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.
Plugins Anthropic maintains or selected for the marketplace Claude Code ships with.
Plugins submitted through claude.ai that passed Anthropic’s review; the list is a nightly mirror.
Plugins OpenAI lists in the marketplace Codex ships with.
Plugins Cursor publishes itself. Cursor does not publish its list of third-party Marketplace plugins.
The community Codex plugin list HOL maintains on GitHub.
HOL imported this listing from the registry.
Lists last read . HOL re-reads them every day.
Submitting it? Check it against each directory's rules
HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.