Threat explainer

Skill and plugin safety

How malicious skills, plugins, and agent packages hide risky behavior.

Agent skills are tiny helpers. Some helpers ask for too much.

Skills and plugins create supply-chain risk through install scripts, hidden prompts, and tool permission drift.

HOL Guard turns these moments into private receipts first, then public lessons only after redaction and moderation.

Harness setup guides

Protect the coding tools your team already uses without forcing everyone to become a security expert.

Redacted warnings

Real protection moments, scrubbed for safety before becoming public learning pages.

Safe labs

Practice attack patterns with static simulations. Nothing dangerous executes.