A

Agon

autoresearch-factory/agon · v0.3.0 · Development & Workflow

by AutoResearch-FactoryScan grade: Acceptable

Claude Code plugin for autonomous research: multi-agent scientist/coder/auditor loops take a topic through idea, proposal, and running experiments

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Agon a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • 5 skills

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • 2 high or critical findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is Agon?

Agon is a published development & workflow plugin for AI coding agents in the Claude Code ecosystem, developed by AutoResearch-Factory and distributed through the HOL AI plugin registry. Claude Code plugin for autonomous research: multi-agent scientist/coder/auditor loops take a topic through idea, proposal, and running experiments.

Canonical slug
autoresearch-factory/agon
Version
v0.3.0 · updated Nov 7, 2026

Registry snapshot

Owner verification
Not verified
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
5 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

35

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
40/100
MCP server setup
100/100
Plugin Security
72/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/AutoResearch-Factory/Agon
Source commit
7572044f26c4…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Needs review
Security result
72
Security score
2
High findings
Provider
codex-plugin-scanner
Grade
C · Acceptable
Version
3.24.2
codex:hol-plugin-scanner-jd0cKJ / cisco-skill-scanner: failedcodex:hol-plugin-scanner-jd0cKJ / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

6/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

21/31

9 checks

[codex:.] Security

6/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

highsecurityHARDCODED_SECRETReported 2 times

Potential secret material was detected in README.md.

Remove the secret from source control and load it securely at runtime.

lowsecuritySECURITY_MD_MISSINGReported 2 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE

The manifest is missing the documented recommended field "license".

Add "license" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS

The manifest is missing the documented recommended field "keywords".

Add "keywords" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Find the marketplace and plugin names

    The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.

    shell
  3. 3

    Install the plugin

    Substitute the plugin entry name and the marketplace name shown by the previous step.

    claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "agon",
  "description": "Idea discovery, proposal refinement, experiment execution, and deep literature orchestration",
  "version": "0.3.0",
  "author": {
    "name": "Youran Sun, Xingyu Ren, Chugang Yi"
  },
  "repository": "https://github.com/AutoResearch-Factory/Agon",
  "interface": {
    "displayName": "agon",
    "developerName": "AutoResearch-Factory"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/AutoResearch-Factory/Agon
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

5 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • aris

    skills/aris/SKILL.md

    Research-mindset catalog distilled from ARIS skills, for subagent Read on demand.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • arxiv-tools

    skills/arxiv-tools/SKILL.md

    >

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • novelty-check

    skills/novelty-check/SKILL.md

    Use when checking novelty of a research idea or proposal. Extract core claims, do multi-source arxiv / Scholar / S2 search, grade each claim HIGH/MEDIUM/LOW. 基本就是 ARIS novelty-check skill, 但去掉了 cross-model verification 和 report schema.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • server-health

    skills/server-health/SKILL.md

    Use when you need project-specific compute/server notes to pick a server or confirm a running task, if the project has filled its server manual or monitoring hooks.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • sibyl

    skills/sibyl/SKILL.md

    Research-persona catalog distilled from Sibyl prompts, for subagent Read on demand. 与 ARIS 互补 — ARIS 按阶段组织, Sibyl 按人格视角组织.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/plugin.json

file

224 bytes

aa5edd4b9418952d…

.codex-plugin/plugin.json

plugin-manifest

403 bytes

f2292d3cc3481aba…

agents/deep-lit-reader.md

file

10,102 bytes

be4cb5914c1953be…

agents/env-validator.md

file

1,715 bytes

7ef4d09cb87e4cf0…

agents/experiment-auditor.md

file

5,099 bytes

1690b8f8ffb303dd…

agents/experiment-coder.md

file

17,678 bytes

54b2f8d88ed9188c…

agents/experiment-reviewer.md

file

10,922 bytes

e18345a97ac942ac…

agents/experiment-scientist.md

file

15,019 bytes

c5ba8a0df1e0244c…

agents/experiment-screener.md

file

14,406 bytes

2c34733da9dcf615…

agents/idea-creator.md

file

11,729 bytes

46d64d252dc01c1f…

agents/idea-refiner.md

file

7,818 bytes

9f22ee1fb1272385…

agents/idea-reviewer.md

file

11,603 bytes

fa54a957ed910357…

agents/proposal-refiner.md

file

7,332 bytes

7c5f7fc5b4a168f3…

agents/proposal-reviewer.md

file

6,894 bytes

cea94c242466d476…

commands/deep-lit-tick.md

file

16,948 bytes

0e99d3bb27d4cef9…

commands/experiment-tick.md

file

13,150 bytes

dc57820f939c9c27…

commands/idea-tick.md

file

11,407 bytes

49f938081ccaed8f…

commands/proposal-tick.md

file

6,196 bytes

c716df39db2483c4…

hooks/hooks.json

file

2,112 bytes

9ec582bcea3c0dbb…

LICENSE

file

1,436 bytes

a0ecac899f377228…

README.md

file

6,720 bytes

04f82c8f5b8d40ee…

skills/aris/SKILL.md

skill

12,365 bytes

4cbe4333332e5c0a…

skills/arxiv-tools/arxiv_tool.py

skill

55,035 bytes

345e62f908e3cd99…

skills/arxiv-tools/paper_cache.py

skill

4,919 bytes

69586e908ae1a577…

skills/arxiv-tools/SKILL.md

skill

3,420 bytes

6281bcc12518f4bc…

skills/novelty-check/SKILL.md

skill

2,292 bytes

8d28a17693aa6d3f…

skills/server-health/SKILL.md

skill

1,166 bytes

1af3391b3c6bebc4…

skills/sibyl/SKILL.md

skill

6,006 bytes

22586700e8f33769…

Agon — Frequently asked questions

What is Agon?
Agon is an AI plugin in the HOL registry. Claude Code plugin for autonomous research: multi-agent scientist/coder/auditor loops take a topic through idea, proposal, and running experiments.
How do I install Agon?
Install Agon in your harness: Claude Code — /plugin marketplace add AutoResearch-Factory/Agon; Any agent — npx [email protected] add AutoResearch-Factory/Agon. Full step-by-step guidance is on the HOL plugin page.
How do I install Agon in Claude Code?
To install Agon in Claude Code, start with /plugin marketplace add AutoResearch-Factory/Agon. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for Agon computed?
Agon has a HOL Trust Score of 35 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/autoresearch-factory%2Fagon/trust
Who publishes Agon?
Agon is published by AutoResearch-Factory and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins