O

Ontoly

Deterministic Software Graph workflows for Codex: architecture review, dependency analysis, request tracing, configuration analysis, and impact analysis.

0xsarwagya/ontoly · v0.1.0 · Development & Workflow

0xsarwagyaOwner verifiedsafe

Trust Score

85

Security

95

Surfaces

1

What is Ontoly?

Ontoly is a published development & workflow plugin for AI coding agents in the codex ecosystem, developed by 0xsarwagya and distributed through the HOL AI plugin registry. Deterministic Software Graph workflows for Codex: architecture review, dependency analysis, request tracing, configuration analysis, and impact analysis.

Canonical slug
0xsarwagya/ontoly
Version
v0.1.0 · updated Sep 15, 2026

Trust & Reputation

HOL Trust Score
85

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
0pts
MCP Posture
100pts

Registry Snapshot

Publisher verification
No
Marketplace source
Unknown
Scanner
Broker fallback
Safety label
safe
Digest verified
Yes
1 bundled skill — copy or download SKILL.mdOpen skills

Trust & reputation

Trust & Reputation

HOL Trust Score
85

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
0pts
MCP Posture
100pts
Plugin Security
95pts
Provenance
70pts
Publisher Quality
75pts

Provenance

Plugin root
plugins/0xsarwagya/ontoly-codex-plugin
Source repo
https://github.com/0xsarwagya/ontoly-codex-plugin
Source commit
04ee2a2e39f1…
Publisher verified
No
Owner verified
@0xsarwagya

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

Verified badge not detected

Add the HOL verified badge to the repository README to score +2% trust. Plugin owners can open that pull request from Guard Plugins.

Security Posture

safe
Safety label
95
Security score
0
High findings
Provider
registry-broker-fallback
Grade
A · safe
Version
Unknown
cisco-skill-scanner: unknown

Findings

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /var/folders/9z/48v7m0s52llddzmskkyjbdl80000gn/T/hol-skill-safety-ajqfML (lenient mode requires at least one markdown file)

Ontoly — Frequently asked questions

What is Ontoly?
Ontoly is an AI plugin in the HOL registry. Deterministic Software Graph workflows for Codex: architecture review, dependency analysis, request tracing, configuration analysis, and impact analysis.
How do I install Ontoly?
Install Ontoly in your harness: Codex — codex plugin marketplace add 0xsarwagya/ontoly-codex-plugin; Any agent — npx skills add 0xsarwagya/ontoly-codex-plugin. Full step-by-step guidance is on the HOL plugin page.
How do I install Ontoly in Codex?
To install Ontoly in Codex, start with codex plugin marketplace add 0xsarwagya/ontoly-codex-plugin. The complete step-by-step install guide for Codex is on the HOL plugin page.
Is Ontoly free?
Pricing for Ontoly is published on its HOL plugin page when the maker schedules a launch.
Who publishes Ontoly?
Ontoly is published by 0xsarwagya and listed on HOL.
Is Ontoly available now?
Ontoly availability is listed on its HOL plugin page.

Install Guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs
  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the ontoly-codex-plugin marketplace, and install ontoly.

  3. 3

    Verify the marketplace registration

    shell

Plugin Manifest

{
  "name": "ontoly",
  "version": "0.1.0",
  "description": "Use Ontoly Software Graph evidence, CLI reports, MCP, and Agent Skills for deterministic TypeScript codebase understanding.",
  "author": {
    "name": "0xsarwagya",
    "url": "https://github.com/0xsarwagya"
  },
  "homepage": "https://oss.sarwagya.wtf/ontoly",
  "repository": "https://github.com/0xsarwagya/ontoly-codex-plugin",
  "license": "MIT",
  "keywords": [
    "ontoly",
    "software-graph",
    "codebase-intelligence",
    "mcp",
    "agent-skills",
    "typescript",
    "codex"
  ],
  "skills": "./",
  "interface": {
    "displayName": "Ontoly",
    "developerName": "0xsarwagya",
    "shortDescription": "Use deterministic Software Graph evidence before searching source files",
    "longDescription": "Ontoly builds a deterministic Software Graph for TypeScript repositories. Use this plugin when Codex needs architecture review, dependency analysis, impact analysis, request tracing, configuration analysis, security ownership, or codebase onboarding backed by graph evidence and MCP capabilities.",
    "category": "Developer Tools",
    "capabilities": [
      "Interactive",
      "Read",
      "Write"
    ],
    "websiteURL": "https://oss.sarwagya.wtf/ontoly",
    "privacyPolicyURL": "https://github.com/0xsarwagya/ontoly-codex-plugin/blob/main/SECURITY.md",
    "termsOfServiceURL": "https://github.com/0xsarwagya/ontoly-codex-plugin/blob/main/LICENSE",
    "defaultPrompt": [
      "Explain this repository with Ontoly evidence",
      "Trace this request flow with Ontoly",
      "Find what depends on this service"
    ],
    "brandColor": "#111827",
    "screenshots": []
  },
  "registryIndexVersion": 5
}

Marketplace Source

Repo URL
https://github.com/0xsarwagya/ontoly-codex-plugin
Marketplace path
Unknown
Source path
plugins/0xsarwagya/ontoly-codex-plugin
Install policy
AVAILABLE

Skills

Copy or download the SKILL.md files this plugin ships, then install them with the Skills CLI.

Share
skills-cli

ontoly-software-graph

skills/ontoly-software-graph/SKILL.md

Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files when reviewing architecture, dependencies, request flows, configuration, impact, or security-sensitive ownership.

Raw SKILL.md
---
name: ontoly-software-graph
description: Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files when reviewing architecture, dependencies, request flows, configuration, impact, or security-sensitive ownership.
---

# Ontoly Software Graph

Use this skill when the user asks Codex to understand a TypeScript repository's architecture, dependency graph, request flow, service ownership, configuration usage, impact radius, package topology, or security-sensitive code paths.

Ontoly is a deterministic Software Graph compiler. It does not answer questions with AI. It builds graph evidence that Codex can query before falling back to source search.

## Workflow

1. Check whether `.ontoly/SoftwareGraph.json` exists.
2. If the graph is missing or stale, ask before installing dependencies or writing generated graph files. Then run:

   ```bash
   pnpm add -D @0xsarwagya/ontoly-cli
   pnpm ontoly build .
   ```

3. Inspect graph quality before answering:

   ```bash
   pnpm ontoly coverage .
   pnpm ontoly stats .
   ```

4. Prefer Ontoly graph queries before repository-wide source search:

   ```bash
   pnpm ontoly architecture --json
   pnpm ontoly report dependencies --format markdown
   pnpm ontoly report routes --format markdown
   pnpm ontoly query impact <node-id>
   pnpm ontoly trace <node-id-or-name>
   ```

5. Start Ontoly MCP when the environment supports MCP-backed tools:

   ```bash
   pnpm ontoly mcp
   ```

6. Use source files only when the graph is missing, stale, low confidence, or insufficient for the question.

## Common Questions

- "Explain this repository."
- "Which service owns authentication?"
- "Trace the login flow."
- "What breaks if I remove this repository/service/function?"
- "Which packages depend on this module?"
- "Where is this environment variable read?"
- "Which routes are protected by auth?"

## Evidence Rules

When answering, cite graph evidence:

- graph hash
- node ids
- relationship types
- source spans when available
- diagnostics or confidence warnings
- fallback reason if source files were inspected

Never claim certainty beyond Ontoly evidence. If graph coverage is incomplete, say exactly which part is inferred or unresolved.

## Official Ontoly Skills

Ontoly publishes task-specific Agent Skills in its own repository. To inspect or install them with the open `skills` CLI:

```bash
npx skills add 0xsarwagya/ontoly --list
npx skills add 0xsarwagya/ontoly --skill architecture-review
npx skills add 0xsarwagya/ontoly --skill impact-analysis
npx skills add 0xsarwagya/ontoly --skill request-tracing
```

Use those official skills when the task maps directly to one of their workflows.

File Inventory

.codex-plugin/plugin.json

plugin-manifest

1,474 bytes

d3b546205a3edc83

skills/ontoly-software-graph/SKILL.md

skill

2,721 bytes

19feb860e384f281