A

Agent Bridge

avas-app/agent-bridge · v0.6.0 · source 71df2d4 · Development & Workflow

by avas-appScan grade: GoodAwesome AI Plugins

Lets coding agents drive a running React Native or Expo app from inside: read and press the screen, set state, mock the network, then undo it all

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Agent Bridge a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • Codex
  • 1 skill

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • 2 medium findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is Agent Bridge?

Agent Bridge is a published development & workflow plugin for AI coding agents that works with Claude Code and Codex, developed by avas-app and distributed through the HOL AI plugin registry. Lets coding agents drive a running React Native or Expo app from inside: read and press the screen, set state, mock the network, then undo it all.

Canonical slug
avas-app/agent-bridge
Version
v0.6.0 · source 71df2d4 · updated Nov 13, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

85

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
90/100
MCP server setup
100/100
Plugin Security
86/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/avas-app/agent-bridge
Source commit
71df2d4abb70…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Scanner CI check is still running

No action is required. This listing will update after the catalog rechecks scanner CI.

README badge check is still running

No action is required. This listing will update after the catalog rechecks the source README.

Needs review
Security result
86
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-nFuu7n / cisco-skill-scanner: failedcodex:hol-plugin-scanner-nFuu7n / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

22/22

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

21/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumoperational-securityDEPENDENCY_LOCKFILE_MISSINGReported 2 times

package.json is present without a corresponding lockfile or pinned dependency snapshot.

Commit a lockfile or use fully pinned requirements for reproducible dependency resolution.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_AUTHOR

The manifest is missing the documented recommended field "author".

Add "author" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE

The manifest is missing the documented recommended field "license".

Add "license" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS

The manifest is missing the documented recommended field "keywords".

Add "keywords" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/avas-app/agent-bridge/blob/71df2d4abb7057d1fba7e8937357d3c5aa810689/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "agent-bridge",
  "version": "0.6.0",
  "description": "Lets coding agents drive a running React Native or Expo app from inside: read and press the screen, set state, mock the network, then undo it all.",
  "repository": "https://github.com/avas-app/agent-bridge",
  "homepage": "https://github.com/avas-app/agent-bridge",
  "interface": {
    "displayName": "Agent Bridge",
    "developerName": "avas-app",
    "category": "Development & Workflow"
  },
  "skills": "./",
  "holManifestOrigin": "synthesized",
  "registryIndexVersion": 9
}

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • agent-bridge

    skills/agent-bridge/SKILL.md

    Drive a running React Native or Expo dev build directly through @avasapp/agent-bridge: start from an app-defined scenario such as a locally signed-in user, see what's on screen, fill in forms, press buttons, seed query data, flip feature flags, set store state, navigate, mock the network, fake realtime messages and undo it all, in milliseconds per call instead of tapping through the app. Pairs with agent-device, which opens the app and covers native UI, real taps and screenshots. Use whenever you need the app in a particular state to test a change, or need to verify what a screen shows.

    Raw SKILL.md

File inventory

.claude-plugin/marketplace.json

file

901 bytes

65ebc563f2eda5cf…

.codex-plugin/plugin.json

plugin-manifest

493 bytes

d04850016d446bba…

.github/dependabot.yml

file

193 bytes

2ccdb1d265770e63…

LICENSE

file

1,432 bytes

c5d3e53559dc35a6…

package.json

file

4,949 bytes

008927e9627fadf2…

README.md

file

7,895 bytes

ae3ecf3dc2dbda69…

README.md

file

7,895 bytes

ae3ecf3dc2dbda69…

SECURITY.md

file

510 bytes

2f6ad2af022c98c5…

skills/agent-bridge/references/device.md

skill

1,798 bytes

01ab0a8349f2e94c…

skills/agent-bridge/references/flows.md

skill

3,832 bytes

c7bd4bc6f6d5a526…

skills/agent-bridge/references/large-data.md

skill

1,905 bytes

99627459346012d6…

skills/agent-bridge/references/network.md

skill

3,079 bytes

44129966b85c20a4…

skills/agent-bridge/references/realtime.md

skill

1,188 bytes

13be75e309e73bad…

skills/agent-bridge/references/restore.md

skill

4,461 bytes

897d70580048fa50…

skills/agent-bridge/references/screen.md

skill

4,004 bytes

5cb3c0344884a95c…

skills/agent-bridge/references/state.md

skill

3,499 bytes

956ac22e3795e4b9…

skills/agent-bridge/references/webview.md

skill

2,875 bytes

56db4273ca64310c…

skills/agent-bridge/references/writing-scenarios.md

skill

4,657 bytes

e5ed61e763f3762a…

skills/agent-bridge/SKILL.md

skill

10,796 bytes

10bb94d072747295…

tsconfig.json

file

648 bytes

b2bfb76f0393b15a…

Agent Bridge — Frequently asked questions

What is Agent Bridge?
Agent Bridge is an AI plugin in the HOL registry. Lets coding agents drive a running React Native or Expo app from inside: read and press the screen, set state, mock the network, then undo it all.
How do I install Agent Bridge?
Install Agent Bridge in your harness: Source — https://github.com/avas-app/agent-bridge/releases; Any agent — npx [email protected] add avas-app/agent-bridge. Full step-by-step guidance is on the HOL plugin page.
How do I install Agent Bridge in Source?
To install Agent Bridge in Source, start with https://github.com/avas-app/agent-bridge/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
How is the Trust Score for Agent Bridge computed?
Agent Bridge has a HOL Trust Score of 85 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/avas-app%2Fagent-bridge/trust
Who publishes Agent Bridge?
Agent Bridge is published by avas-app and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins