H

heldkeys

hugomn/heldkeys · v0.0.0 · Tools & Integrations

by hugomnOwner verified

Lists the credentials an AI coding agent can reach on a laptop, in a sandbox or in CI, and flags agent steps in GitHub workflows that hold secrets while reading untrusted input

InstallSourceFollow0
Trust ScoreScan pendingSecurityScan pendingSurfacesScan pending

Is heldkeys a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Standalone

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

What is heldkeys?

heldkeys is a published tools & integrations plugin for AI coding agents in the standalone ecosystem, developed by hugomn and distributed through the HOL AI plugin registry. Lists the credentials an AI coding agent can reach on a laptop, in a sandbox or in CI, and flags agent steps in GitHub workflows that hold secrets while reading untrusted input

Canonical slug
hugomn/heldkeys
Version
v0.0.0 · updated Oct 16, 2026

Registry Snapshot

Project link
heldkeys
Publisher verification
No
Marketplace source
Unknown
Scanner
Registry pipeline
Security result
Not scanned
Digest verified
No

Trust & reputation

Provenance

Plugin root
.
Source repo
https://github.com/hugomn/heldkeys
Source commit
Unpinned
Publisher verified
No
Owner verified
@hugomn

Scanner CI check is still running

No action is required. This listing will update after the catalog rechecks scanner CI.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security Posture

See how the Trust Score is computed
Not scanned
Security result
N/A
Security score
0
High findings

Findings

No normalized findings were returned for this plugin.

heldkeys — Frequently asked questions

What is heldkeys?
heldkeys is an AI plugin in the HOL registry. Lists the credentials an AI coding agent can reach on a laptop, in a sandbox or in CI, and flags agent steps in GitHub workflows that hold secrets while reading untrusted input
How do I install heldkeys?
Install heldkeys in your harness: Source — https://github.com/hugomn/heldkeys/releases. Full step-by-step guidance is on the HOL plugin page.
How do I install heldkeys in Source?
To install heldkeys in Source, start with https://github.com/hugomn/heldkeys/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
Is heldkeys free?
Pricing for heldkeys is published on its HOL plugin page when the maker schedules a launch.
Who publishes heldkeys?
heldkeys is published by hugomn and listed on HOL.
Is heldkeys available now?
heldkeys availability is listed on its HOL plugin page.

Install Guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/hugomn/heldkeys/blob/HEAD/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Loading reviews

Plugin Manifest

{
  "name": "heldkeys",
  "version": "0.0.0",
  "description": "Lists the credentials an AI coding agent can reach on a laptop, in a sandbox or in CI, and flags agent steps in GitHub workflows that hold secrets while reading untrusted input",
  "repository": "https://github.com/hugomn/heldkeys",
  "homepage": "https://github.com/hugomn/heldkeys",
  "interface": {
    "displayName": "heldkeys",
    "developerName": "hugomn",
    "category": "Tools & Integrations"
  }
}

File Inventory

.codex-plugin/plugin.json

plugin-manifest

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from heldkeys.

Alternatives in Tools & Integrations

See all Tools & Integrations plugins