A

antidote

avtr99/antidote · v1.1.0 · Development & Workflow

by Avtr99Owner verifiedScan grade: GoodAwesome AI Plugins

An antidote to AI patchwork: stops agents from hiding bugs behind guards and makes them remove the cause

InstallSource
Follow0
Trust Score84Security scan88Components2
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is antidote a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • Claude Code
  • Cursor
  • Grok
  • Agent Plugin
  • 2 skills

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

What is antidote?

antidote is a published development & workflow plugin for AI coding agents that works with Codex, Claude Code, Cursor, Grok and Agent Plugin, developed by Avtr99 and distributed through the HOL AI plugin registry. An antidote to AI patchwork: stops agents from hiding bugs behind guards and makes them remove the cause.

Canonical slug
avtr99/antidote
Version
v1.1.0 · updated Nov 5, 2026

Registry snapshot

Owner verification
Verified on HOL as @Avtr99
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
2 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
84

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
88/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/Avtr99/antidote
Source commit
14a12dcccc69…
Publisher verified
Yes
Owner verified
@Avtr99
Agent Plugins 1.0
Ready (structural check)

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
88
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-n34h8N / cisco-skill-scanner: failedcodex:hol-plugin-scanner-n34h8N / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

21/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

15/15

3 checks

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

[opencode:.] OpenCode Plugin

2/2

4 checks

[opencode:.] Security

16/16

6 checks

[opencode:.] Operational Security

3/6

5 checks

[opencode:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSINGReported 3 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the antidote entry from the avtr-antidote marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall antidote@avtr-antidote.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "antidote",
  "description": "Stop AI agents from patching symptoms. Forces structural root-cause fixes over symptom patching in any language or stack.",
  "version": "1.1.0",
  "author": {
    "name": "Avtr99",
    "url": "https://github.com/Avtr99"
  },
  "repository": "https://github.com/Avtr99/antidote",
  "license": "MIT",
  "keywords": [
    "code-quality",
    "refactoring",
    "antidote",
    "root-cause",
    "defensive-code",
    "simplification",
    "agent-skills"
  ],
  "skills": "./",
  "interface": {
    "displayName": "antidote",
    "developerName": "Avtr99"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/Avtr99/antidote
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

2 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • antidote

    .github/plugin/antidote/skills/antidote/SKILL.md

    Stop AI agents from patching symptoms. Use this skill when coding, reviewing, refactoring, auditing, committing fixes, or adding guards, validation, workarounds, or 20+ lines without deleting code.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • antidote

    skills/antidote/SKILL.md

    Stop AI agents from patching symptoms. Use this skill when coding, reviewing, refactoring, auditing, committing fixes, or adding guards, validation, workarounds, or 20+ lines without deleting code.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.agents/plugins/marketplace.json

file

704 bytes

7e14467b7ac79298…

.claude-plugin/marketplace.json

file

779 bytes

e5a2a640d1077b14…

.claude-plugin/plugin.json

file

500 bytes

baf9bbfb4428b998…

.codex-plugin/plugin.json

plugin-manifest

553 bytes

b1e8cf037f1d6d46…

.cursor-plugin/plugin.json

file

485 bytes

560e48356721bacb…

.github/plugin/antidote/skills/antidote/SKILL.md

skill

5,926 bytes

ff3d689a5eb0095e…

.grok-plugin/plugin.json

file

485 bytes

560e48356721bacb…

.opencode/plugins/antidote.js

file

5,384 bytes

fae95f72fafcb53b…

LICENSE

file

1,420 bytes

a6d060b60d404de8…

package-lock.json

file

179 bytes

72d5d025ed358578…

package.json

file

501 bytes

ef87096e2317611f…

plugin.json

file

575 bytes

4e1d57c3bb0014d3…

README.md

file

7,402 bytes

f8338df3cdedd9d1…

SECURITY.md

file

554 bytes

8bb094871501fc9b…

skills/antidote/README.md

skill

769 bytes

4cfc69cac2053282…

skills/antidote/SKILL.md

skill

5,926 bytes

ff3d689a5eb0095e…

antidote — Frequently asked questions

What is antidote?
antidote is an AI plugin in the HOL registry. An antidote to AI patchwork: stops agents from hiding bugs behind guards and makes them remove the cause.
How do I install antidote?
Install antidote in your harness: Codex — codex plugin marketplace add Avtr99/antidote; Claude Code — /plugin marketplace add Avtr99/antidote; Cursor — npx [email protected] add Avtr99/antidote. Full step-by-step guidance is on the HOL plugin page.
How do I install antidote in HOL Guard?
To install antidote in HOL Guard, start with hol-guard plugin install avtr99/antidote --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install antidote in Codex?
To install antidote in Codex, start with codex plugin marketplace add Avtr99/antidote. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install antidote in Claude Code?
To install antidote in Claude Code, start with /plugin marketplace add Avtr99/antidote. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for antidote computed?
antidote has a HOL Trust Score of 84 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/avtr99%2Fantidote/trust
Who publishes antidote?
antidote is published by Avtr99 and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-19 to 2026-11-09.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from antidote.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins