Registry Broker icon

Registry Broker

hol/registry-broker-codex-plugin · v0.1.0 · Development & Workflow

by HOLScan grade: Good

Delegate tasks to specialist AI agents via the HOL Registry, plan, find, summon, and recover sessions.

InstallSourceClaim this plugin
Follow0
Trust Score80Security scan89Components2
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Registry Broker a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • 1 skill
  • 1 MCP server

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Interactive, Write
License
Apache-2.0

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Registry Broker?

Registry Broker is a published development & workflow plugin for AI coding agents in the Codex ecosystem, developed by HOL and distributed through the HOL AI plugin registry. Delegate tasks to specialist AI agents via the HOL Registry, plan, find, summon, and recover sessions.

Canonical slug
hol/registry-broker-codex-plugin
Version
v0.1.0 · updated Nov 2, 2026

Registry snapshot

Owner verification
Not verified
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

80

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
89/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/hashgraph-online/registry-broker-codex-plugin
Source commit
225fa3111b30…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
89
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
cisco-skill-scanner: failedcisco-mcp-scanner: unavailable

Manifest Validation

28/31

9 checks

Security

20/20

9 checks

Operational Security

3/6

5 checks

Best Practices

9/12

5 checks

Marketplace

N/A

3 checks · not applicable

Skill Security

5/5

4 checks

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install registry-broker-codex-plugin.

  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "registry-broker-codex-plugin",
  "version": "0.1.0",
  "description": "Codex plugin wrapper for summon-first Registry Broker delegation on top of the canonical HOL Registry skill and CLI.",
  "author": {
    "name": "HOL",
    "email": "[email protected]",
    "url": "https://github.com/hashgraph-online"
  },
  "homepage": "https://hol.org/registry/plugins/hol%2Fregistry-broker-codex-plugin",
  "repository": "https://github.com/hashgraph-online/registry-broker-codex-plugin",
  "license": "Apache-2.0",
  "keywords": [
    "openai-codex",
    "codex-cli",
    "codex-plugin",
    "model-context-protocol",
    "mcp-server",
    "registry-broker",
    "ai-agents",
    "agentic-ai",
    "hedera"
  ],
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "Registry Broker",
    "developerName": "HOL",
    "shortDescription": "Codex wrapper for summon-first broker delegation",
    "longDescription": "A Codex-focused plugin wrapper around the canonical HOL Registry skill and CLI. Use it to shortlist specialists, delegate bounded subtasks through Registry Broker, and pull the exact broker session back into Codex when needed.",
    "category": "Coding",
    "capabilities": [
      "Interactive",
      "Write"
    ],
    "websiteURL": "https://hol.org/registry/plugins/hol%2Fregistry-broker-codex-plugin",
    "privacyPolicyURL": "https://hol.org/privacy-policy/",
    "termsOfServiceURL": "https://hol.org/terms/",
    "defaultPrompt": [
      "Summon the best broker specialist for this bug and return a fix plan.",
      "Shortlist Registry Broker candidates for this subtask and explain the ranking.",
      "Delegate this bounded task through Registry Broker and keep the session trail."
    ],
    "brandColor": "#0F766E",
    "composerIcon": "./assets/icon.png",
    "logo": "./assets/logo.svg",
    "screenshots": [
      "./assets/screenshot-summon.png",
      "./assets/screenshot-shortlist.png"
    ]
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/hashgraph-online/registry-broker-codex-plugin
Marketplace path
Unknown
Source path
plugins/hashgraph-online/registry-broker-codex-plugin
Install policy
AVAILABLE

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • registry-broker-orchestrator

    skills/registry-broker-orchestrator/SKILL.md

    Use Registry Broker to discover and summon specialist agents for focused subtasks from inside Codex.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

1,778 bytes

898450bb4de4e132…

.mcp.json

file

184 bytes

80da1a7af55f131c…

.registry/mcp.json

mcp-config

105 bytes

f708f365101e5292…

assets/icon.png

asset

48,944 bytes

f23a56f71a5bc5d9…

assets/logo.svg

asset

788 bytes

bdfbef31305155c9…

assets/screenshot-shortlist.png

asset

945,172 bytes

fde0f456cd750ce6…

eslint.config.js

file

428 bytes

ac55baf1858b5037…

LICENSE

file

12,192 bytes

0dbafa063012b493…

package.json

file

1,989 bytes

e59d0fd57ab41cc5…

pnpm-lock.yaml

file

150,524 bytes

85997ea104838d2f…

README.md

file

9,551 bytes

c76982b00ad74e3d…

SECURITY.md

file

1,286 bytes

ab9a3e6d9814e72e…

skills/registry-broker-orchestrator/SKILL.md

skill

3,217 bytes

73a11e1054e8031f…

tsconfig.json

file

577 bytes

c45c3a4f2e6887ed…

Registry Broker — Frequently asked questions

What is Registry Broker?
Registry Broker is an AI plugin in the HOL registry. Delegate tasks to specialist AI agents via the HOL Registry, plan, find, summon, and recover sessions.
How do I install Registry Broker?
Install Registry Broker in your harness: Codex — codex plugin marketplace add hashgraph-online/registry-broker-codex-plugin; Any agent — npx [email protected] add hashgraph-online/registry-broker-codex-plugin. Full step-by-step guidance is on the HOL plugin page.
How do I install Registry Broker in Codex?
To install Registry Broker in Codex, start with codex plugin marketplace add hashgraph-online/registry-broker-codex-plugin. The complete step-by-step install guide for Codex is on the HOL plugin page.
How is the Trust Score for Registry Broker computed?
Registry Broker has a HOL Trust Score of 80 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/hol%2Fregistry-broker-codex-plugin/trust
Who publishes Registry Broker?
Registry Broker is published by HOL and listed on HOL.

Directory acceptance

Listed in 1 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-15 to 2026-11-12.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Registry Broker.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins