How do I install triad?

Install triad in your harness: Claude Code — /plugin marketplace add rishabh1S/triad; Any agent — npx skills@1.7.4 add rishabh1S/triad. Full step-by-step guidance is on the HOL plugin page.

How do I install triad in HOL Guard?

To install triad in HOL Guard, start with hol-guard plugin install rishabh1s/triad --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.

How do I install triad in Claude Code?

To install triad in Claude Code, start with /plugin marketplace add rishabh1S/triad. The complete step-by-step install guide for Claude Code is on the HOL plugin page.

How is the Trust Score for triad computed?

triad has a HOL Trust Score of 74 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/rishabh1s%2Ftriad/trust

triad is published by rishabh1S and listed on HOL.

triad

rishabh1s/triad · v0.4.2 · Development & Workflow

by rishabh1SOwner verifiedScan grade: AcceptableAwesome AI Plugins

Claude Code plugin that splits a task between a read-only Planner, an Implementer and an independent Reviewer that sees only the approved plan and the diff, then offers to commit just the task's files

Install Source

Follow0

Trust Score74 Security scan76 Components4

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is triad a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Claude Code

4 skills

Before you install

Sign-in: Not declared
Declared access: Not declared
License: MIT

Check before relying on it

Some security checks did not finish: Cisco skill scan. See the evidence

What is triad?

triad is a published development & workflow plugin for AI coding agents in the Claude Code ecosystem, developed by rishabh1S and distributed through the HOL AI plugin registry. Claude Code plugin that splits a task between a read-only Planner, an Implementer and an independent Reviewer that sees only the approved plan and the diff, then offers to commit just the task's files.

Canonical slug: rishabh1s/triad
Version: v0.4.2 · updated Nov 2, 2026
Open data: entity.json (JSON-LD)

Registry snapshot

Repository: https://github.com/rishabh1S/triad
Canonical profile: https://hol.org/registry/plugins/rishabh1s%2Ftriad
Owner verification: Verified on HOL as @rishabh1S
Marketplace source: .claude-plugin/marketplace.json
Scanner: HOL plugin scanner
Security result: Needs review
Digest verified: Yes

4 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100/100

Maintenance

0/100

MCP server setup

100/100

Plugin Security

76/100

Provenance

80/100

Publisher Quality

100/100

Provenance

Plugin root: plugins/triad
Source repo: https://github.com/rishabh1S/triad
Source commit: a9ce18e16c34…
Publisher verified: Yes
Owner verified: @rishabh1S
Agent Plugins 1.0: Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed

Needs review

Security result

Security score

High findings

Provider: codex-plugin-scanner
Grade: C · Acceptable
Version: 3.24.2

codex:hol-plugin-scanner-y7N1Q7 / cisco-skill-scanner: failedcodex:hol-plugin-scanner-y7N1Q7 / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

10/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

21/31

9 checks

[codex:.] Security

10/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

6/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked 2026-10-30. This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 2 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowsecurityLICENSE_MISSINGReported 2 times

Plugins should ship a LICENSE file so consumers can review usage rights.

Add a LICENSE file that matches the manifest license metadata.

lowbest-practicesREADME_MISSING

Plugins should document installation, usage, and security expectations in README.md.

Add a README.md that explains setup, usage, and operational constraints.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

1
Add the marketplace
Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.
claude code
2
Install the plugin
Installs the triad entry from the triad-agents marketplace.
claude code
3
Scripted alternative
Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.
shell
4
Check it is installed
Lists installed plugins. The entry should appear as enabled.
shell

To remove it later, run claude plugin uninstall triad@triad-agents.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "triad",
  "version": "0.4.2",
  "description": "Planner → Implementer → Reviewer multi-agent workflow for Claude Code. Commands: /triad:plan, /triad:build, /triad:review, /triad:run, /triad:commit.",
  "author": {
    "name": "Rishabh Singh"
  },
  "license": "MIT",
  "keywords": [
    "subagents",
    "orchestration",
    "planning",
    "code-review",
    "workflow"
  ],
  "repository": "https://github.com/rishabh1S/triad",
  "interface": {
    "displayName": "triad",
    "developerName": "rishabh1S"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL: https://github.com/rishabh1S/triad
Marketplace path: .claude-plugin/marketplace.json
Source path: plugins/triad
Install policy: Unspecified

Skills

4 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

skills-cli

commit
skills/commit/SKILL.md
Commit the current triad task, or set how triad commits after a passing review. Usage /triad:commit [manual|auto|off|commit message]
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
plan
skills/plan/SKILL.md
Plan a task with the read-only triad planner agent and save it to .triad/plan.md for your approval. Usage /triad:plan <task>
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
review
skills/review/SKILL.md
Independently review the current changes against .triad/plan.md with the read-only triad reviewer agent. Usage /triad:review [extra focus]
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
run
skills/run/SKILL.md
Run the full triad loop — plan, your approval, implement, independent review, fix — for one task. Usage /triad:run <task>
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/plugin.json

file

370 bytes

f8bbc5a6fee4d938…

.codex-plugin/plugin.json

plugin-manifest

517 bytes

6d3845c3b85d2598…

agents/implementer.md

file

2,285 bytes

dfd652541aa49765…

agents/planner.md

file

2,173 bytes

0d4d42bbd04102f9…

agents/reviewer.md

file

3,726 bytes

4f345d215f390d1d…

hooks/bash_check.py

file

9,107 bytes

c343b804f68439b5…

hooks/guard.py

file

3,178 bytes

8cdb77ea5d835e9d…

hooks/guard.sh

file

526 bytes

75f950ca29b26a14…

hooks/hooks.json

file

505 bytes

83e85b7e93c287bc…

hooks/implementer_check.py

file

2,888 bytes

e296d80fdc61c54f…

hooks/triad_paths.py

file

734 bytes

ad2fe34ff0789dad…

skills/commit/SKILL.md

skill

4,718 bytes

2a711dd7fb5594eb…

skills/plan/new-task.md

skill

608 bytes

19270898f0fd89d6…

skills/plan/SKILL.md

skill

1,054 bytes

b0601a0fc1719e2d…

skills/review/approved-plan.md

skill

954 bytes

119db529c8a8ae3e…

skills/review/SKILL.md

skill

1,330 bytes

83d780dfb63c1f77…

skills/run/SKILL.md

skill

2,686 bytes

8330cdf5134c9dd4…

triad — Frequently asked questions

What is triad?: triad is an AI plugin in the HOL registry. Claude Code plugin that splits a task between a read-only Planner, an Implementer and an independent Reviewer that sees only the approved plan and the diff, then offers to commit just the task's files.
How do I install triad?: Install triad in your harness: Claude Code — /plugin marketplace add rishabh1S/triad; Any agent — npx [email protected] add rishabh1S/triad. Full step-by-step guidance is on the HOL plugin page.
How do I install triad in HOL Guard?: To install triad in HOL Guard, start with hol-guard plugin install rishabh1s/triad --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install triad in Claude Code?: To install triad in Claude Code, start with /plugin marketplace add rishabh1S/triad. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for triad computed?: triad has a HOL Trust Score of 74 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/rishabh1s%2Ftriad/trust
Who publishes triad?: triad is published by rishabh1S and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Claude Code official marketplaceNot listed
Plugins Anthropic maintains or selected for the marketplace Claude Code ships with.
Claude community directoryNot listed
Plugins submitted through claude.ai that passed Anthropic’s review; the list is a nightly mirror.
Codex curated marketplaceNot listed
Plugins OpenAI lists in the marketplace Codex ships with.
Cursor official pluginsNot in public list
Plugins Cursor publishes itself. Cursor does not publish its list of third-party Marketplace plugins.
Awesome Codex Plugins (HOL)Not listed
The community Codex plugin list HOL maintains on GitHub.

Lists last read Nov 3, 2026. HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here: <5; HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports: <10; Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces: <5; Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars: <5; From HOL's GitHub snapshots of the repository, 2026-10-22 to 2026-11-03.

Reviews and similar plugins

User reviews

No reviews yet. Write the first review

Is triad a fit?

Works with

Before you install

Check before relying on it

What is triad?

Registry snapshot

Trust and security

Trust & reputation

HOL Trust Score

Provenance

Security posture

Published advisories

Findings

Install guidance

Install in Claude Code

Did setup work in Claude Code?

Plugin manifest

Marketplace source

Skills

File inventory

triad — Frequently asked questions

Directory acceptance

Install signal

Related plugins

Alternatives in Development & Workflow

Reviews and similar plugins

User reviews

Similar plugins