varg/varg · v1.0.0 · Tools & Integrations
How to make any AI video: find the skill, the options to show and the steps (no key needed), with the keyless varg how to MCP and the varg MCP for video, image, voice and music generation.
Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.
From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.
varg is a published tools & integrations plugin for AI coding agents that works with MCP, Codex, Claude Code and Antigravity CLI, developed by varg and distributed through the HOL AI plugin registry. How to make any AI video: find the skill, the options to show and the steps (no key needed), with the keyless varg how to MCP and the varg MCP for video, image, voice and music generation.
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Continuous scanner CI not detected
This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.
Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.
README badge not detected
Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.
Some checks did not finish: Cisco skill scan and Cisco MCP scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.
[claude:.] Claude Plugin
18/18
5 checks
[claude:.] Security
24/24
6 checks
[claude:.] Operational Security
17/17
5 checks
[claude:.] Code Quality
10/10
2 checks
[codex:.] Manifest Validation
28/31
9 checks
[codex:.] Security
24/24
9 checks
[codex:.] Operational Security
17/17
5 checks
[codex:.] Best Practices
12/15
5 checks
[codex:.] Marketplace
N/A
3 checks · not applicable
[codex:.] Skill Security
0/5
4 checks
[codex:.] Code Quality
10/10
2 checks
[gemini:.] Gemini Extension
10/10
3 checks
[gemini:.] Security
24/24
6 checks
[gemini:.] Operational Security
17/17
5 checks
[gemini:.] Code Quality
10/10
2 checks
None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.
GitHub security advisories are those the source repository has published.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl -s "https://varg.ai/how-to/api/search?q=<format" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://github.com/vargHQ/skills/tree/main/media-download" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl -s -X POST https://api.varg.ai/v2/speech" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl -sf https://raw.githubusercontent.com/vargHQ/skills/main/varg-ai/SKILL.md" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to/make-a-birthday-video" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl for POST https://api.varg.ai/v2/render." and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl -s -X POST https://api.varg.ai/v2/render" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl -s -X POST https://api.varg.ai/v2/speech" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to/make-birthday-and-occasion-videos" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to/publish" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://skills.varg.ai/browse/skills/edit-services/" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The skill includes "curl homepage: https://varg.ai/how-to" and uses curl with uploads, shell composition, or arguments requiring review.
Remove instructions that read sensitive local files, launch shell wrappers, or send workspace data to remote endpoints.
The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.
Update "screenshots" to use HTTPS or an existing relative asset path.
A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.
Add a .codexignore file with generated assets, local state, and secret paths.
Install through the Claude Code plugin marketplace.
Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.
Add the marketplace
Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.
Install the plugin
Installs the varg entry from the varg marketplace.
Scripted alternative
Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.
Check it is installed
Lists installed plugins. The entry should appear as enabled.
To remove it later, run claude plugin uninstall varg@varg.
No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.
Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.
Loading reviews
{
"name": "varg",
"version": "1.0.0",
"description": "How to make any AI video: find the skill, the options to show and the steps, then generate video, images, voice and music with varg on one key.",
"author": {
"name": "varg",
"url": "https://varg.ai"
},
"homepage": "https://varg.ai/how-to",
"repository": "https://github.com/vargHQ/skills",
"license": "MIT",
"keywords": [
"video",
"ai-video",
"how-to",
"video-editing",
"ffmpeg",
"agent-skills",
"image-generation",
"text-to-speech",
"music",
"mcp"
],
"skills": "./",
"mcpServers": "./.registry/mcp.json",
"interface": {
"displayName": "varg",
"developerName": "varg",
"shortDescription": "How to make any AI video",
"longDescription": "varg how to answers \"how do I make this video\" for an AI agent. One call to search_how_to with the person's request, in their words and in any language, returns ranked cards from 2,000+ checked AI video agent skills, how-to tutorials, FFmpeg recipes, video formats, prompts and styles. get_how_to returns the full tutorial as Markdown: the best skill, the 2-4 choices to show the person with example videos, and the steps. No account or key. To generate, connect the varg MCP (mcp.varg.ai), which puts 200+ image, video, voice and music models behind one key.",
"category": "Creativity",
"capabilities": [
"Read",
"Write"
],
"defaultPrompt": [
"Make a UGC ad for my skincare serum.",
"Add TikTok style captions to this video.",
"Turn my song into a lyric video."
],
"websiteURL": "https://varg.ai/how-to",
"supportURL": "https://github.com/vargHQ/skills/issues",
"privacyPolicyURL": "https://varg.ai/privacy",
"termsOfServiceURL": "https://varg.ai/terms",
"composerIcon": "./assets/varg-512.png",
"logo": "./assets/varg-512.png"
},
"holManifestOrigin": "repository",
"registryIndexVersion": 9
}60 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.
.claude-plugin/marketplace.json
file
489 bytes
d46ba54838dcec44…
.claude-plugin/plugin.json
file
6,160 bytes
eefb01dbd279c9f9…
.codex-plugin/plugin.json
plugin-manifest
1,710 bytes
f75f953d27b12751…
.github/dependabot.yml
file
118 bytes
883b95e3be554fba…
.github/ISSUE_TEMPLATE/bug_report.md
file
499 bytes
35459d277ea6e2fd…
.github/ISSUE_TEMPLATE/feature_request.md
file
319 bytes
a9cca0543ce68cbe…
.github/PULL_REQUEST_TEMPLATE.md
file
341 bytes
684d79135bd607b9…
.github/workflows/publish-clawhub.yml
file
4,390 bytes
c5d3f8d7ee12be11…
.mcp.json
file
206 bytes
670236cbb720efd7…
.registry/mcp.json
mcp-config
143 bytes
51a0d056f93c533b…
ad-creative-testing/SKILL.md
skill
8,089 bytes
0358d4b1121c084a…
ai-ad-compliance-check/references/example-report.md
file
2,548 bytes
5e389957c21a54fd…
ai-ad-compliance-check/references/rules.json
file
10,205 bytes
2dc37fe54bd68d30…
ai-ad-compliance-check/SKILL.md
skill
5,784 bytes
0a17de0cc61556e4…
ai-ugc-ad-video/references/prompts.md
file
9,844 bytes
0bc01e7e7d262229…
ai-ugc-ad-video/SKILL.md
skill
8,205 bytes
aaf094b0de87bca7…
app-ui-mockups/assets/presets/agent-terminal-session.json
file
5,828 bytes
33ed725c11503ecc…
app-ui-mockups/assets/presets/amber-booth-console.json
file
5,478 bytes
c626b0542abddbb8…
app-ui-mockups/assets/presets/code-editor-walkthrough.json
file
5,052 bytes
6cc2236aa1030123…
app-ui-mockups/assets/presets/code-slab-3d.json
file
5,129 bytes
c3cbe25135115239…
app-ui-mockups/assets/presets/desktop-notification-banner.json
file
4,743 bytes
9c99d7b5a3292a43…
app-ui-mockups/assets/presets/desktop-terminal-window.json
file
5,089 bytes
9693d5b549733e2f…
app-ui-mockups/assets/presets/exploded-ui-panels.json
file
4,219 bytes
215fb6dcb3e1928a…
app-ui-mockups/assets/presets/phone-message-thread.json
file
6,481 bytes
628e35cd630a467a…
app-ui-mockups/assets/presets/team-chat-channel.json
file
5,666 bytes
4570b257d552a1f0…
app-ui-mockups/assets/presets/terminal-command-run.json
file
5,013 bytes
74828a382d8b9423…
app-ui-mockups/evals/trigger_eval.json
file
925 bytes
5fbbb05e56bc45c6…
app-ui-mockups/examples/demo/compositions/agent.html
file
9,686 bytes
321e1ad98eb3463e…
app-ui-mockups/examples/demo/compositions/chat.html
file
9,535 bytes
cce53aea2fe41a02…
app-ui-mockups/examples/demo/compositions/explode.html
file
10,349 bytes
80a77615a51da7e9…
app-ui-mockups/examples/demo/compositions/slab.html
file
6,119 bytes
e809d38a94fd44c4…
app-ui-mockups/examples/demo/hyperframes.json
file
318 bytes
53dbce1e19aa713c…
app-ui-mockups/examples/demo/index.html
file
2,422 bytes
e23a542d59a92bda…
app-ui-mockups/examples/demo/meta.json
file
79 bytes
20bf994bac2cadd3…
app-ui-mockups/examples/demo/package.json
file
293 bytes
2632f6baa42477cd…
app-ui-mockups/examples/demo/README.md
file
4,875 bytes
d6687857e821ae41…
app-ui-mockups/references/agent-terminal-session.md
file
6,613 bytes
5946663cb7c19e6f…
app-ui-mockups/references/amber-booth-console.md
file
7,251 bytes
e4e6a03878b69116…
app-ui-mockups/references/code-editor-walkthrough.md
file
6,440 bytes
722de36ad18a992e…
app-ui-mockups/references/code-slab-3d.md
file
5,905 bytes
b1e370683a1a1d39…
app-ui-mockups/references/desktop-notification-banner.md
file
5,914 bytes
51afc9d8b142036a…
app-ui-mockups/references/desktop-terminal-window.md
file
5,451 bytes
f94b04259448fccd…
app-ui-mockups/references/exploded-ui-panels.md
file
6,224 bytes
7a3c80100446af53…
app-ui-mockups/references/phone-message-thread.md
file
7,734 bytes
8ed79004bfa33bf2…
app-ui-mockups/references/sources.md
file
15,323 bytes
3ba3e07375591c84…
app-ui-mockups/references/team-chat-channel.md
file
7,256 bytes
7c76da83043a5bbb…
app-ui-mockups/references/terminal-command-run.md
file
6,708 bytes
a90bbd42e4cd6b75…
app-ui-mockups/SKILL.md
skill
9,002 bytes
5aaab299913db751…
assets/varg-512.png
asset
34,872 bytes
c98151341453c636…
caption-styles/assets/presets/active-word-color-captions.json
file
7,218 bytes
df982b876e20ade2…
caption-styles/assets/presets/active-word-pop-captions.json
file
6,787 bytes
d05324d088fb3472…
caption-styles/assets/presets/bounce-word-pill.json
file
6,437 bytes
2042c6495d11f818…
caption-styles/assets/presets/frosted-panel-captions.json
file
5,681 bytes
bc300ca7fa02f96e…
caption-styles/assets/presets/gradient-word-captions.json
file
5,919 bytes
f3968a3579ebffec…
caption-styles/assets/presets/grow-highlight-captions.json
file
6,327 bytes
fea3f2b34d1e6310…
caption-styles/assets/presets/karaoke-fill-captions.json
file
5,702 bytes
39f11cd038fb80d4…
caption-styles/assets/presets/line-hug-box-captions.json
file
7,312 bytes
0c4be54c10bc7b5e…
caption-styles/assets/presets/neon-tube-captions.json
file
5,773 bytes
203aa49975740c79…
caption-styles/assets/presets/outline-spring-captions.json
file
5,856 bytes
4475e6deb0f665a5…
caption-styles/assets/presets/serif-italic-captions.json
file
6,428 bytes
ec6ea90bfb9c4b76…
caption-styles/assets/presets/shadow-minimal-captions.json
file
5,539 bytes
e29ce44733174d71…
caption-styles/assets/presets/sliding-pill-captions.json
file
7,365 bytes
413af146b9f27b9e…
caption-styles/assets/presets/tilted-card-word-pop.json
file
6,457 bytes
4f4cbde50826f53b…
caption-styles/assets/presets/translucent-box-subtitles.json
file
6,617 bytes
ce12380af156ceeb…
caption-styles/assets/presets/white-card-captions.json
file
5,674 bytes
eddc0e2837d2975e…
caption-styles/assets/presets/word-tile-captions.json
file
5,702 bytes
49f3f2910a8b49cd…
caption-styles/evals/trigger_eval.json
file
863 bytes
e7afa3757d3c6ad7…
caption-styles/examples/demo/hyperframes.json
file
318 bytes
53dbce1e19aa713c…
caption-styles/examples/demo/index.html
file
25,493 bytes
0084b3237d872e34…
caption-styles/examples/demo/package.json
file
252 bytes
adddab288f1ef7db…
caption-styles/examples/demo/README.md
file
3,553 bytes
e7e8b08843afd749…
caption-styles/references/_shared-caption-craft.md
file
7,081 bytes
5f1bfdcfec5d1630…
caption-styles/references/active-word-color-captions.md
file
12,408 bytes
cf579c6045c072ee…
caption-styles/references/active-word-pop-captions.md
file
11,190 bytes
1a97d410ef9f91db…
caption-styles/references/bounce-word-pill.md
file
10,127 bytes
b7ab79c3cb9844df…
caption-styles/references/frosted-panel-captions.md
file
9,392 bytes
19dc85a229da51d6…
caption-styles/references/gradient-word-captions.md
file
9,809 bytes
a74953efaef253ef…
caption-styles/references/grow-highlight-captions.md
file
10,517 bytes
c769422b9addc72d…
caption-styles/references/karaoke-fill-captions.md
file
9,974 bytes
566b8db714b70c9e…
caption-styles/references/line-hug-box-captions.md
file
11,414 bytes
2a03b2bc2f11d96e…
caption-styles/references/neon-tube-captions.md
file
10,059 bytes
c42e937e7d1f3f6a…
caption-styles/references/outline-spring-captions.md
file
9,661 bytes
7418437148a17218…
caption-styles/references/serif-italic-captions.md
file
10,892 bytes
c2df7bd7eb74c30a…
caption-styles/references/shadow-minimal-captions.md
file
9,448 bytes
6bf92beed5cc980f…
caption-styles/references/sliding-pill-captions.md
file
12,951 bytes
d7e52bc96f310578…
caption-styles/references/sources.md
file
22,376 bytes
5bd45f534b3d6c43…
caption-styles/references/tilted-card-word-pop.md
file
9,813 bytes
f7bec9efe35d9c46…
caption-styles/references/translucent-box-subtitles.md
file
11,361 bytes
6e1f096318fc6498…
caption-styles/references/white-card-captions.md
file
9,012 bytes
3dde9090ae0400fc…
caption-styles/references/word-tile-captions.md
file
9,288 bytes
c9926e61425f0fb3…
caption-styles/SKILL.md
skill
11,771 bytes
9521c218f66e895f…
character-passport/code/blockout_turnaround.html
file
6,794 bytes
1f8a7d6b2a098b3f…
character-passport/code/face_rig.py
file
6,227 bytes
27d468183cf4684e…
character-passport/code/glb_turnaround.html
file
2,582 bytes
3caf4b3e2ec5614b…
character-passport/code/hunyuan3d_space.py
file
899 bytes
6a4dfefe11a01978…
character-passport/code/package.json
file
137 bytes
a36425985c0b0f6b…
character-passport/code/prop_pbr.html
file
4,801 bytes
2a1f435f8287d50b…
character-passport/code/shoot.ts
file
1,613 bytes
59232fcd5a8f62d0…
character-passport/code/trellis2_space.py
file
734 bytes
34f5c0c2ed4dcece…
character-passport/code/vrm_expressions.html
file
3,921 bytes
f092a0a73f109c73…
Listed in 1 of 5 directory lists
Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.
Plugins Anthropic maintains or selected for the marketplace Claude Code ships with.
Plugins submitted through claude.ai that passed Anthropic’s review; the list is a nightly mirror.
Plugins OpenAI lists in the marketplace Codex ships with.
Plugins Cursor publishes itself. Cursor does not publish its list of third-party Marketplace plugins.
Seen on the list since
The community Codex plugin list HOL maintains on GitHub.
Lists last read . HOL re-reads them every day.
Submitting it? Check it against each directory's rules
HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.
Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from varg.
No reviews yet. Write the first review
Similar by contents
Suggested from HOL scan evidence: same category, at least one shared runtime, similar tags and contents. Paid placement and Trust Score play no part.