SteinWall icon

SteinWall

maximilian-steinmetz/steinwall · v0.1.1 · Development & Workflow

by Maximilian SteinmetzAwesome AI Plugins

Cost brake, action guard, loop rescue and extension scanner that run locally as Codex hooks.

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is SteinWall a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • Claude Code
  • 2 skills
  • Runs hooks on agent events

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Not declared
License
FSL-1.1-MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is SteinWall?

SteinWall is a published development & workflow plugin for AI coding agents that works with Codex and Claude Code, developed by Maximilian Steinmetz and distributed through the HOL AI plugin registry. Cost brake, action guard, loop rescue and extension scanner that run locally as Codex hooks.

Canonical slug
maximilian-steinmetz/steinwall
Version
v0.1.1 · updated Nov 2, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Partial scan
Digest verified
Yes
2 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

79

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
90/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/maxxstm/steinwall
Source commit
319dc9d3f118…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Partial scan
Security result
90
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
codex-plugin-scanner
Grade
A · Excellent
Version
3.24.2
codex:hol-plugin-scanner-YnPIY3 / cisco-skill-scanner: failedcodex:hol-plugin-scanner-YnPIY3 / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

15/15

3 checks

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the steinwall entry from the steinwall marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall steinwall@steinwall.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "steinwall",
  "version": "0.1.1",
  "description": "Guardian for coding agents: cost brake, blocks or stops risky actions (recursive delete, force push, secrets, curl|sh), rescues stuck loops, hands work over before usage limits, scans skills/plugins/MCP servers before install. Spend less. Break nothing.",
  "author": {
    "name": "Maximilian Steinmetz",
    "url": "https://github.com/maxxstm"
  },
  "homepage": "https://github.com/maxxstm/steinwall",
  "repository": "https://github.com/maxxstm/steinwall",
  "license": "FSL-1.1-MIT",
  "keywords": [
    "cost",
    "budget",
    "safety",
    "guardrails",
    "hooks",
    "security",
    "mcp",
    "scanner"
  ],
  "hooks": "./hooks/codex-hooks.json",
  "skills": "./",
  "interface": {
    "displayName": "SteinWall",
    "developerName": "Maximilian Steinmetz",
    "shortDescription": "Cost brake, action guard, loop rescue and extension scanner for Codex.",
    "longDescription": "SteinWall runs locally next to Codex. It stops runaway costs with a daily and monthly budget, blocks risky actions such as recursive deletes, force pushes, reading secrets or piping downloads into a shell, helps a stuck agent change strategy instead of looping, writes a handoff file before a usage limit runs out, and scans skills, plugins and MCP servers for malicious patterns before they are installed. No prompts, code or keys leave the machine.",
    "category": "Developer Tools",
    "composerIcon": "./assets/icon.svg",
    "logo": "./assets/icon.svg",
    "websiteURL": "https://github.com/maxxstm/steinwall"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/maxxstm/steinwall
Marketplace path
.claude-plugin/marketplace.json
Source path
plugins/maxxstm/steinwall
Install policy
AVAILABLE

Skills

2 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • steinwall-briefing

    lite/codex/skills/steinwall-briefing/SKILL.md

    Daily cost briefing for Codex and a safety scan for extensions. Use when the user asks what Codex cost today or this week, how much of the 5-hour or weekly limit is used, for a daily briefing or report, or how much they could save; and before installing a skill, plugin or MCP server, or when asked to check one for malicious content.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • steinwall

    skills/steinwall/SKILL.md

    SteinWall cost, savings and safety information, and a security check for extensions. Use when the user asks what the coding agent costs today or this month, how much budget is left, what was blocked or saved, or before installing a skill, plugin or MCP server ("is this safe to install?", "check this skill").

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.agents/plugins/marketplace.json

file

255 bytes

a23ed7e9572db742…

.claude-plugin/marketplace.json

file

357 bytes

18d4ca5feda368ea…

.claude-plugin/plugin.json

file

683 bytes

12e496b929f948c1…

.codex-plugin/plugin.json

plugin-manifest

1,488 bytes

033e5e2112d8b31a…

agents/scout.md

file

1,044 bytes

8ab01bdf076402ad…

assets/icon.svg

asset

576 bytes

19adbe97e574cca1…

commands/budget.md

file

506 bytes

d4d75866b272e280…

commands/license.md

file

438 bytes

e61f3179f0b871dd…

commands/report.md

file

334 bytes

c6aa5c7b724101f2…

commands/scan.md

file

581 bytes

f39eaacf57069d4c…

commands/setup.md

file

495 bytes

2fa5ffd50a21a0fb…

commands/status.md

file

262 bytes

4d4a39aed3af2080…

commands/telemetry.md

file

343 bytes

492cfd1caebe2707…

hooks/codex-hooks.json

file

1,749 bytes

4d964704ba421abb…

hooks/hooks.json

file

1,479 bytes

eac19ff4d723863f…

LICENSE

file

5,628 bytes

d99ad8278c457bac…

lite/codex/skills/steinwall-briefing/scripts/steinwall-briefing.mjs

file

40,630 bytes

e25e1246a2680454…

lite/codex/skills/steinwall-briefing/SKILL.md

skill

2,245 bytes

a1588fd49e7ac57f…

package-lock.json

file

15,899 bytes

8837943baaa3336d…

package.json

file

1,402 bytes

8e2e8c006b49c9ab…

README.md

file

15,931 bytes

5c986ebd67961af1…

SECURITY.md

file

721 bytes

48c56f200f428402…

skills/steinwall/SKILL.md

skill

1,744 bytes

8bf5c660c52fdb44…

tsconfig.json

file

366 bytes

d4555c51c4278872…

SteinWall — Frequently asked questions

What is SteinWall?
SteinWall is an AI plugin in the HOL registry. Cost brake, action guard, loop rescue and extension scanner that run locally as Codex hooks.
How do I install SteinWall?
Install SteinWall in your harness: Codex — codex plugin marketplace add maxxstm/steinwall; Claude Code — /plugin marketplace add maxxstm/steinwall; Any agent — npx [email protected] add maxxstm/steinwall. Full step-by-step guidance is on the HOL plugin page.
How do I install SteinWall in HOL Guard?
To install SteinWall in HOL Guard, start with hol-guard plugin install maximilian-steinmetz/steinwall --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install SteinWall in Codex?
To install SteinWall in Codex, start with codex plugin marketplace add maxxstm/steinwall. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install SteinWall in Claude Code?
To install SteinWall in Claude Code, start with /plugin marketplace add maxxstm/steinwall. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for SteinWall computed?
SteinWall has a HOL Trust Score of 79 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/maximilian-steinmetz%2Fsteinwall/trust
Who publishes SteinWall?
SteinWall is published by Maximilian Steinmetz and listed on HOL.

Directory acceptance

Listed in 1 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins