Contorium icon

Contorium

contoriumlabs/contorium · v1.3.1 · Development & Workflow

by ContoriumLabsScan grade: Good

Runtime continuity layer for AI coding agents, providing persistent workspace state, Git-aware sessions, and MCP-based context retrieval across tools and agent runs

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Contorium a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • MCP
  • Claude Code
  • Cursor
  • 1 skill
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Read, Write
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Contorium?

Contorium is a published development & workflow plugin for AI coding agents that works with Codex, MCP, Claude Code and Cursor, developed by ContoriumLabs and distributed through the HOL AI plugin registry. Runtime continuity layer for AI coding agents, providing persistent workspace state, Git-aware sessions, and MCP-based context retrieval across tools and agent runs.

Canonical slug
contoriumlabs/contorium
Version
v1.3.1 · updated Nov 2, 2026

Registry snapshot

Owner verification
Not verified
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

77

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
85/100
MCP server setup
100/100
Plugin Security
87/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/ContoriumLabs/contorium
Source commit
d5949d7c91d8…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Needs review
Security result
87
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-7KiVg7 / cisco-skill-scanner: failedcodex:hol-plugin-scanner-7KiVg7 / cisco-mcp-scanner: unavailable

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

17/20

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

28/31

9 checks

[codex:.] Security

17/20

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 2 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Find the marketplace and plugin names

    The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.

    shell
  3. 3

    Install the plugin

    Substitute the plugin entry name and the marketplace name shown by the previous step.

    claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "contorium",
  "version": "1.3.1",
  "description": "Contorium: AI Project Intelligence Layer — preserve and retrieve project cognition across Codex sessions via MCP.",
  "author": {
    "name": "ContoriumLabs",
    "url": "https://github.com/ContoriumLabs"
  },
  "homepage": "https://github.com/ContoriumLabs/contorium#readme",
  "repository": "https://github.com/ContoriumLabs/contorium",
  "license": "MIT",
  "keywords": [
    "workspace",
    "memory",
    "context",
    "mcp",
    "codex",
    "ai-coding"
  ],
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "Contorium",
    "developerName": "ContoriumLabs",
    "shortDescription": "AI Project Intelligence Layer for Codex",
    "longDescription": "Contorium captures, structures, and preserves project intelligence (STATE, INTENT, DECISION, WHY) locally. Query via MCP inspect tools — Contorium records intelligence; it does not decide for the project.",
    "category": "Developer Tools",
    "capabilities": [
      "Read",
      "Write"
    ],
    "websiteURL": "https://github.com/ContoriumLabs/contorium",
    "privacyPolicyURL": "https://github.com/ContoriumLabs/contorium#readme",
    "termsOfServiceURL": "https://github.com/ContoriumLabs/contorium/blob/main/LICENSE",
    "defaultPrompt": [
      "Recall my workspace focus and active files.",
      "Store a design decision in Contorium memory.",
      "Summarize Git and session context before we continue."
    ],
    "brandColor": "#2563EB",
    "composerIcon": "./assets/logo.png",
    "logo": "./assets/logo.png"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/ContoriumLabs/contorium
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • contorium-workspace-memory

    skills/contorium-workspace-memory/SKILL.md

    Use Contorium workspace memory layers (focus, session events, Git, export) when resuming AI work or avoiding repeated project explanation.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/plugin.json

file

595 bytes

6936bcda03438171…

.codex-plugin/plugin.json

plugin-manifest

1,445 bytes

7d122bcaf515ddb9…

.cursor-plugin/plugin.json

file

839 bytes

ee943ff78dce1fe0…

.mcp.json

file

208 bytes

6c0f90af218eb247…

.registry/mcp.json

mcp-config

147 bytes

adde593533d3b536…

assets/logo.png

asset

6,108 bytes

cb742bf2d1ababd4…

commands/copy-ai-context.md

file

1,376 bytes

7b6f07328b38e196…

commands/learn-workspace-intent.md

file

582 bytes

686a00ca30a1bf86…

commands/setup-mcp-claude-code.md

file

676 bytes

f6fd2382b88c53af…

commands/setup-mcp-codex.md

file

1,186 bytes

a7891947fce466d2…

commands/start-fresh-session.md

file

680 bytes

5c57d57c4062eb34…

LICENSE

file

1,428 bytes

a565120eb091a62d…

package-lock.json

file

5,645 bytes

91a08407e1fcd696…

package.json

file

9,374 bytes

b43ed8c0f2b2a529…

README.md

file

12,103 bytes

7056253119e7f21a…

skills/contorium-workspace-memory/SKILL.md

skill

1,914 bytes

4092831472931804…

tsconfig.json

file

529 bytes

51b57f249d76c1a4…

Contorium — Frequently asked questions

What is Contorium?
Contorium is an AI plugin in the HOL registry. Runtime continuity layer for AI coding agents, providing persistent workspace state, Git-aware sessions, and MCP-based context retrieval across tools and agent runs.
How do I install Contorium?
Install Contorium in your harness: Codex — codex plugin marketplace add ContoriumLabs/contorium; Claude Code — /plugin marketplace add ContoriumLabs/contorium; Cursor — npx [email protected] add ContoriumLabs/contorium. Full step-by-step guidance is on the HOL plugin page.
How do I install Contorium in Codex?
To install Contorium in Codex, start with codex plugin marketplace add ContoriumLabs/contorium. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install Contorium in Claude Code?
To install Contorium in Claude Code, start with /plugin marketplace add ContoriumLabs/contorium. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How do I install Contorium in Cursor?
To install Contorium in Cursor, start with npx [email protected] add ContoriumLabs/contorium. The complete step-by-step install guide for Cursor is on the HOL plugin page.
How is the Trust Score for Contorium computed?
Contorium has a HOL Trust Score of 77 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/contoriumlabs%2Fcontorium/trust
Who publishes Contorium?
Contorium is published by ContoriumLabs and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins