Actera icon

Actera

actera/actera · v0.2.5 · Development & Workflow

by ActeraScan grade: AcceptableAwesome AI Plugins

Checks each Codex tool call against Actera workspace policies before it runs, holds calls that need a reviewer's approval, and records every decision and outcome.

InstallSourceClaim this plugin
Follow0
Trust Score69Security scan76Components5
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Actera a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • 4 skills
  • 1 MCP server
  • Runs hooks on agent events

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Not declared
License
Apache-2.0

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Actera?

Actera is a published development & workflow plugin for AI coding agents in the Codex ecosystem, developed by Actera and distributed through the HOL AI plugin registry. Checks each Codex tool call against Actera workspace policies before it runs, holds calls that need a reviewer's approval, and records every decision and outcome.

Canonical slug
actera/actera
Version
v0.2.5 · updated Nov 9, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.agents/plugins/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
4 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

69

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
10/100
MCP server setup
100/100
Plugin Security
76/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
plugins/actera
Source repo
https://github.com/Actera-AI/actera-codex
Source commit
d5ac49a735d7…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
76
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
C · Acceptable
Version
3.24.2
cisco-skill-scanner: failedcisco-mcp-scanner: unavailable

Manifest Validation

21/31

9 checks

Security

17/20

9 checks

Operational Security

N/A

5 checks · not applicable

Best Practices

6/12

5 checks

Marketplace

N/A

3 checks · not applicable

Skill Security

5/5

4 checks

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowbest-practicesREADME_MISSING

Plugins should document installation, usage, and security expectations in README.md.

Add a README.md that explains setup, usage, and operational constraints.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install the plugin

    Installs the actera entry from the actera marketplace. You can also install it from the Plugins browser inside Codex.

    shell
  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

To remove it later, run codex plugin remove actera@actera.

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "actera",
  "version": "0.2.5",
  "description": "Check Codex tool calls against Actera policies, hold calls that need approval, and report their outcomes",
  "author": {
    "name": "Actera"
  },
  "repository": "https://github.com/Actera-AI/actera-codex",
  "license": "Apache-2.0",
  "keywords": [
    "actera",
    "policy",
    "approval",
    "codex"
  ],
  "skills": "./",
  "hooks": "./hooks/hooks.json",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "Actera",
    "developerName": "Actera",
    "shortDescription": "Policy checks and approvals for Codex tool calls",
    "longDescription": "Actera checks every tool call Codex makes against your workspace policies before it runs. Monitoring records each call; Enforcing blocks what policies deny and holds calls that need a reviewer, who can approve them in Actera or, once linked, right here in Codex. Connect with $actera-connect.",
    "category": "Coding",
    "composerIcon": "./assets/icon.png",
    "websiteURL": "https://actera.dev",
    "defaultPrompt": "Use $actera-connect to connect this Codex to Actera."
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/Actera-AI/actera-codex
Marketplace path
.agents/plugins/marketplace.json
Source path
plugins/Actera-AI/actera-codex
Install policy
AVAILABLE

Skills

4 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • actera-connect

    skills/actera-connect/SKILL.md

    Connect this Codex installation to an Actera agent through administrator browser approval, or with a setup code from Actera.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • actera-disconnect

    skills/actera-disconnect/SKILL.md

    Disconnect this Codex installation from Actera and remove the plugin's local state.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • actera-mode

    skills/actera-mode/SKILL.md

    Switch Actera between Monitoring and Enforcing, or choose what happens when Actera cannot evaluate a tool call.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • actera-status

    skills/actera-status/SKILL.md

    Show the Actera connection, mode, evaluation-failure behavior, whether the hooks run, and report delivery.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

1,055 bytes

8afc0da6c1cd0629…

.mcp.json

file

380 bytes

21916404f70cd331…

.registry/mcp.json

mcp-config

305 bytes

f6c23790ecead3fe…

assets/icon.png

asset

31,792 bytes

dfcb38c1f5a16232…

hooks/hooks.json

file

1,195 bytes

31140d31ef53b7b9…

LICENSE

file

15,144 bytes

ff08d7bc84b934e5…

skills/actera-connect/agents/openai.yaml

skill

168 bytes

3f7d471bd3d9b15c…

skills/actera-connect/SKILL.md

skill

2,635 bytes

0b9bb19e0b3ad5b0…

skills/actera-disconnect/agents/openai.yaml

skill

188 bytes

81845916a68086cf…

skills/actera-disconnect/SKILL.md

skill

1,284 bytes

b04b24eddedb54a4…

skills/actera-mode/agents/openai.yaml

skill

187 bytes

afbe5d83118fc039…

skills/actera-mode/SKILL.md

skill

1,279 bytes

4687224e9e973624…

skills/actera-status/agents/openai.yaml

skill

169 bytes

50bc0b7714b61c5c…

skills/actera-status/SKILL.md

skill

1,512 bytes

18f69ca949fc314f…

Actera — Frequently asked questions

What is Actera?
Actera is an AI plugin in the HOL registry. Checks each Codex tool call against Actera workspace policies before it runs, holds calls that need a reviewer's approval, and records every decision and outcome.
How do I install Actera?
Install Actera in your harness: Codex — codex plugin marketplace add Actera-AI/actera-codex; Any agent — npx [email protected] add Actera-AI/actera-codex. Full step-by-step guidance is on the HOL plugin page.
How do I install Actera in HOL Guard?
To install Actera in HOL Guard, start with hol-guard plugin install actera/actera --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install Actera in Codex?
To install Actera in Codex, start with codex plugin marketplace add Actera-AI/actera-codex. The complete step-by-step install guide for Codex is on the HOL plugin page.
How is the Trust Score for Actera computed?
Actera has a HOL Trust Score of 69 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/actera%2Factera/trust
Who publishes Actera?
Actera is published by Actera and listed on HOL.

Directory acceptance

Listed in 1 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Actera.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins