A

AxonFlow

getaxonflow/axonflow · v1.9.0 · Tools & Integrations

by getaxonflowScan grade: unsafe

Runtime governance for Codex with policy enforcement on terminal commands, advisory checks for non-terminal tools via skills, PII/secret detection, and compliance-grade audit trails. Self-hosted via Docker.

InstallSourceClaim this plugin
Follow0
Trust Score35Security scan24Components14
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is AxonFlow a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • 13 skills
  • 1 MCP server

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and HOL plugin scan. See the evidence
  • 1 high or critical finding from the scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is AxonFlow?

AxonFlow is a published tools & integrations plugin for AI coding agents in the Codex ecosystem, developed by getaxonflow and distributed through the HOL AI plugin registry. Runtime governance for Codex with policy enforcement on terminal commands, advisory checks for non-terminal tools via skills, PII/secret detection, and compliance-grade audit trails. Self-hosted via Docker.

Canonical slug
getaxonflow/axonflow
Version
v1.9.0 · updated Sep 20, 2026

Registry snapshot

Owner verification
Not verified
Scanner
Registry fallback scan
Security result
Caution
Digest verified
Yes
13 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

35

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64/100
Maintenance
55/100
MCP server setup
65/100
Plugin Security
24/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/getaxonflow/axonflow-codex-plugin
Source commit
580815d0e1b6…
Publisher verified
No
Owner verified
Not owner verified

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Caution
Security result
24
Security score
1
High findings
Provider
registry-broker-fallback
Grade
F · unsafe
Version
Unknown
cisco-skill-scanner: unknown

Published advisories

  • GHSA-8wrg-fpx5-87f7GitHub security advisoriesPublished

    Plugin cache and credential-file permission hardening

GitHub security advisories are those the source repository has published. Checked .

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

highmcp-securitymcp.remote.http

MCP server axonflow uses insecure HTTP transport.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install axonflow.

  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "axonflow",
  "displayName": "AxonFlow Governance",
  "description": "Policy enforcement, PII detection, and audit trails for OpenAI Codex. Hybrid governance — enforces policies on terminal commands (exec_command) via hooks, provides advisory governance for other tools via implicit-activation skills, and records compliance-grade audit trails. Self-hosted via Docker — all data stays on your infrastructure.",
  "version": "1.9.0",
  "author": {
    "name": "AxonFlow",
    "email": "[email protected]",
    "url": "https://getaxonflow.com"
  },
  "homepage": "https://docs.getaxonflow.com/docs/integration/codex/",
  "repository": "https://github.com/getaxonflow/axonflow-codex-plugin",
  "keywords": [
    "governance",
    "security",
    "pii",
    "audit",
    "compliance",
    "policy-enforcement",
    "data-protection",
    "mcp"
  ],
  "license": "MIT",
  "logo": "assets/logo.png",
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "AxonFlow Governance",
    "developerName": "getaxonflow"
  },
  "registryIndexVersion": 5
}

Marketplace source

Repo URL
https://github.com/getaxonflow/axonflow-codex-plugin
Marketplace path
Unknown
Source path
plugins/getaxonflow/axonflow-codex-plugin
Install policy
AVAILABLE

Skills

13 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • audit-search

    skills/audit-search/SKILL.md

    Search AxonFlow audit trail for recent tool executions, policy decisions, and compliance evidence

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • create-override

    skills/create-override/SKILL.md

    Create a governed session override for a policy that would otherwise deny — mandatory justification, server-clamped TTL, blocked for critical-risk policies

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • explain-decision

    skills/explain-decision/SKILL.md

    Fetch the full reasoning behind an AxonFlow policy decision — matched policies, risk level, override availability, recent hit count

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • governance-status

    skills/governance-status/SKILL.md

    Check active governance policies and recent activity summary

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • list-overrides

    skills/list-overrides/SKILL.md

    List active session overrides scoped to the caller's tenant — useful for auditing dangling overrides or confirming an override is in effect before retrying

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • list-recent-decisions

    skills/list-recent-decisions/SKILL.md

    Surface the user's recent AxonFlow governance decisions — answers "what just got blocked", "show me my recent denials", or feeds a decision-history forensic flow

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • pii-scan

    skills/pii-scan/SKILL.md

    Scan content for PII and secrets before writing files, sending messages, or including sensitive data in responses. Use before and after any operation that handles potentially sensitive content.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • policy-list

    skills/policy-list/SKILL.md

    List all active governance policies with categories, patterns, and severity levels

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • post-execute-audit

    skills/post-execute-audit/SKILL.md

    Record tool execution in AxonFlow audit trail after tool calls complete. Use after any tool call for compliance evidence.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • pre-execute-check

    skills/pre-execute-check/SKILL.md

    Check AxonFlow governance policy before executing commands, writing files, or modifying any state. Also scan file content for PII before writing. Use before any tool call that creates, modifies, or deletes data.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • pro-tier-status

    skills/pro-tier-status/SKILL.md

    Report the user's current AxonFlow tier (Free or Pro), Pro license expiry date, endpoint, and whether a license token is configured. Use when the user asks "am I on Pro?", "what tier am I on?", "when does my Pro license expire?", "is my license active?", or wants to know which AxonFlow they're talking to.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • recover-credentials

    skills/recover-credentials/SKILL.md

    Help the user recover lost AxonFlow tenant credentials via the email magic-link flow, or apply a paid Pro-tier license token. Use when the user says they've lost their AXONFLOW_AUTH, lost their secret, can't authenticate, or has a new AXON- license token to install.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • revoke-override

    skills/revoke-override/SKILL.md

    Revoke a previously-created AxonFlow session override — emits an audit event and ensures subsequent policy evaluations no longer consult it

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

964 bytes

9c3ddba1483f72a8…

.mcp.json

file

401 bytes

a5265b6a41d54e6e…

.registry/mcp.json

mcp-config

295 bytes

4d15282abd72a938…

hooks/hooks.json

file

731 bytes

6a49108f7d69d462…

README.md

file

42,934 bytes

bcfe3278bd5d9a19…

SECURITY.md

file

14,979 bytes

e8c1afd6f81244cc…

skills/audit-search/SKILL.md

skill

522 bytes

dc3d941ff4e13456…

skills/create-override/SKILL.md

skill

1,392 bytes

6b9554b0503f6680…

skills/explain-decision/SKILL.md

skill

1,178 bytes

1f5080407a6b74cf…

skills/governance-status/SKILL.md

skill

378 bytes

66185e9ea2e5de59…

skills/list-overrides/SKILL.md

skill

995 bytes

7e4ae61869104700…

skills/list-recent-decisions/SKILL.md

skill

3,072 bytes

f1ee9b4e3f1bb37d…

skills/pii-scan/SKILL.md

skill

1,256 bytes

0759aa223f77bde0…

skills/policy-list/SKILL.md

skill

413 bytes

19827096687855cc…

skills/post-execute-audit/SKILL.md

skill

706 bytes

243673f471b687a6…

skills/pre-execute-check/SKILL.md

skill

1,296 bytes

1d9a715d1d5b60d6…

skills/pro-tier-status/SKILL.md

skill

5,592 bytes

318e2add24c08c13…

skills/recover-credentials/SKILL.md

skill

2,099 bytes

258e316ceb9b42fa…

skills/revoke-override/SKILL.md

skill

1,070 bytes

156a782132370e79…

AxonFlow — Frequently asked questions

What is AxonFlow?
AxonFlow is an AI plugin in the HOL registry. Runtime governance for Codex with policy enforcement on terminal commands, advisory checks for non-terminal tools via skills, PII/secret detection, and compliance-grade audit trails. Self-hosted via Docker.
How do I install AxonFlow?
Install AxonFlow in your harness: Codex — codex plugin marketplace add getaxonflow/axonflow-codex-plugin; Any agent — npx [email protected] add getaxonflow/axonflow-codex-plugin. Full step-by-step guidance is on the HOL plugin page.
How do I install AxonFlow in Codex?
To install AxonFlow in Codex, start with codex plugin marketplace add getaxonflow/axonflow-codex-plugin. The complete step-by-step install guide for Codex is on the HOL plugin page.
How is the Trust Score for AxonFlow computed?
AxonFlow has a HOL Trust Score of 35 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/getaxonflow%2Faxonflow/trust
Who publishes AxonFlow?
AxonFlow is published by getaxonflow and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from AxonFlow.

Alternatives in Tools & Integrations

See all Tools & Integrations plugins

Reviews and similar plugins