How do I install ScientificFigureLibrary?

Install ScientificFigureLibrary in your harness: Claude Code — /plugin marketplace add xuzhougeng/ScientificFigureLibrary; Cursor — npx skills@1.7.4 add xuzhougeng/ScientificFigureLibrary; MCP — git clone https://github.com/xuzhougeng/ScientificFigureLibrary. Full step-by-step guidance is on the HOL plugin page.

How do I install ScientificFigureLibrary in Claude Code?

To install ScientificFigureLibrary in Claude Code, start with /plugin marketplace add xuzhougeng/ScientificFigureLibrary. The complete step-by-step install guide for Claude Code is on the HOL plugin page.

How do I install ScientificFigureLibrary in Cursor?

To install ScientificFigureLibrary in Cursor, start with npx skills@1.7.4 add xuzhougeng/ScientificFigureLibrary. The complete step-by-step install guide for Cursor is on the HOL plugin page.

How is the Trust Score for ScientificFigureLibrary computed?

ScientificFigureLibrary has a HOL Trust Score of 77 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/xuzhougeng-and-jarxunlai%2Ffigure-library/trust

Who publishes ScientificFigureLibrary?

ScientificFigureLibrary is published by xuzhougeng and jarxunlai and listed on HOL.

ScientificFigureLibrary

xuzhougeng-and-jarxunlai/figure-library · v0.9.2 · Development & Workflow

by xuzhougeng and jarxunlaiScan grade: Good

MCP server: local-first server and skill for importing, reviewing, publishing, and reusing scientific figure templates across projects and hosts

Install Source Claim this plugin

Follow0

Trust Score77 Security scan86 Components2

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is ScientificFigureLibrary a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

MCP
Claude Code
Cursor

1 skill
1 MCP server

Before you install

Sign-in: Not declared
Declared access: Interactive, Read, Write
License: MIT

Check before relying on it

Some security checks did not finish: Cisco skill scan. See the evidence
2 medium findings from the scan. See the evidence
The publisher has not verified ownership on HOL.

oddysseyFeaturedObservability-Driven Development for coding agents: instrument an application or an AI agent with OpenTelemetry (gen_ai semantic conventions: model, agent, tool and MCP spans, token and latency metrics), observe a run through its metrics, traces, logs and profiles on a local Grafana stack or a remote backend, benchmark it with k6, and verify that a fix landedView plugin

Feature your plugin

What is ScientificFigureLibrary?

ScientificFigureLibrary is a published development & workflow plugin for AI coding agents that works with MCP, Claude Code and Cursor, developed by xuzhougeng and jarxunlai and distributed through the HOL AI plugin registry. MCP server: local-first server and skill for importing, reviewing, publishing, and reusing scientific figure templates across projects and hosts.

Canonical slug: xuzhougeng-and-jarxunlai/figure-library
Version: v0.9.2 · updated Nov 2, 2026
Open data: entity.json (JSON-LD)

Registry snapshot

Repository: https://github.com/xuzhougeng/ScientificFigureLibrary
Homepage: https://xuzhougeng.github.io/ScientificFigureLibrary/
Canonical profile: https://hol.org/registry/plugins/xuzhougeng-and-jarxunlai%2Ffigure-library
Owner verification: Not verified
Scanner: HOL plugin scanner
Security result: Needs review
Digest verified: Yes

1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100/100

Maintenance

100/100

MCP server setup

100/100

Plugin Security

86/100

Provenance

70/100

Publisher Quality

75/100

Provenance

Plugin root: .
Source repo: https://github.com/xuzhougeng/ScientificFigureLibrary
Source commit: eafee6ff6cc3…
Publisher verified: No
Owner verified: Not owner verified
Agent Plugins 1.0: Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed

Needs review

Security result

Security score

High findings

Provider: codex-plugin-scanner
Grade: B · Good
Version: 3.24.2

codex:hol-plugin-scanner-oOmWEf / cisco-skill-scanner: failedcodex:hol-plugin-scanner-oOmWEf / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

28/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

[deepseek-harness:.] DeepSeek Harness Plugin

10/20

4 checks

[deepseek-harness:.] Security

16/16

6 checks

[deepseek-harness:.] Operational Security

3/6

5 checks

[deepseek-harness:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked 2026-11-02. This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumsecurityDSH_BUNDLE_PATH_UNSAFE

The declared bundle patch is missing or escapes the package root.

Update the native DSH declaration in package.json.

mediumsecurityDSH_RUNTIME_APPLY_MISSING

package.json main/exports must reference a regular in-package module exporting Cordis apply(ctx).

Update the native DSH declaration in package.json.

lowoperational-securityDEPENDABOT_MISSINGReported 3 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

1
Add the marketplace
Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.
claude code
2
Find the marketplace and plugin names
The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.
shell
3
Install the plugin
Substitute the plugin entry name and the marketplace name shown by the previous step.
claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "figure-library",
  "version": "0.9.2",
  "description": "Search Local Published, FigureYa, bundled Open Figure Modules, frozen explicit-only Community, and explicitly trusted dynamic Providers; materialize exact immutable figure references without executing module code.",
  "author": {
    "name": "xuzhougeng and jarxunlai",
    "url": "https://github.com/xuzhougeng/ScientificFigureLibrary"
  },
  "homepage": "https://xuzhougeng.github.io/ScientificFigureLibrary/",
  "repository": "https://github.com/xuzhougeng/ScientificFigureLibrary",
  "license": "MIT",
  "keywords": [
    "scientific-figure",
    "mcp",
    "plot-template",
    "figureya"
  ],
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "Scientific Figure Library",
    "developerName": "xuzhougeng and jarxunlai",
    "shortDescription": "Search and materialize reviewed scientific-figure templates",
    "longDescription": "Search Local Published, FigureYa, bundled Open Figure Modules, frozen explicit-only Community, and explicitly trusted dynamic Providers; review exact previews; materialize immutable figure references; and preserve the no-code-execution boundary. The same Skill and MCP server ship in the Wisp and Claude packages.",
    "category": "Productivity",
    "capabilities": [
      "Interactive",
      "Read",
      "Write"
    ],
    "defaultPrompt": [
      "Open Scientific Figure Library and search for a volcano plot",
      "Find a grouped bar chart template I can materialize",
      "Show Local Published figure templates matching this plot"
    ],
    "brandColor": "#246C4E",
    "websiteURL": "https://xuzhougeng.github.io/ScientificFigureLibrary/",
    "composerIcon": "./assets/brand/sfl-logo.svg",
    "logo": "./assets/brand/sfl-logo.svg",
    "logoDark": "./assets/brand/sfl-logo.svg",
    "screenshots": []
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL: https://github.com/xuzhougeng/ScientificFigureLibrary
Marketplace path: Unknown
Source path: .
Install policy: Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

skills-cli

figure-library
skills/figure-library/SKILL.md
Search, browse, select, import, review, publish, and materialize reusable scientific-figure assets through Scientific Figure Library. Use for finding plotting references or managing the shared figure library; the host executes project tasks.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/plugin.json

file

534 bytes

340be8ee5121f41d…

.codex-plugin/mcp.json

file

147 bytes

5929622783471ad0…

.codex-plugin/plugin.json

plugin-manifest

1,718 bytes

3e7f12a5f1da6018…

.cursor-plugin/plugin.json

file

693 bytes

ac74c4e7fa5fcc50…

.registry/mcp.json

mcp-config

87 bytes

21e84bb3671df233…

AGENTS.md

file

4,549 bytes

6a391959f0b6a8bc…

assets/brand/sfl-logo.svg

asset

3,002 bytes

4876d242b7e7d40b…

LICENSE

file

1,480 bytes

8564303bb8819d3f…

package-lock.json

file

109,393 bytes

ac189a6ecfed140d…

package.json

file

5,560 bytes

5d6c53240bb01921…

README.md

file

13,004 bytes

1a4c606dde892ffb…

SECURITY.md

file

925 bytes

6908537883053d51…

skills/figure-library/agents/openai.yaml

skill

816 bytes

563fc317f2cf238b…

skills/figure-library/assets/sfl-logo.svg

skill

3,002 bytes

4876d242b7e7d40b…

skills/figure-library/references/figure-description/GUIDE.md

skill

4,019 bytes

a2fc9cc0d13727d5…

skills/figure-library/references/figure-description/references/figureya-writing-patterns.md

skill

1,758 bytes

f075db568208885e…

skills/figure-library/references/figure-organization/GUIDE.md

skill

3,012 bytes

fe2a9239cdaa5ba8…

skills/figure-library/references/figure-organization/NOTICE.md

skill

494 bytes

0d8f711604989762…

skills/figure-library/references/figure-organization/references/output-binding.md

skill

2,047 bytes

a6600cc544241d38…

skills/figure-library/references/figure-organization/references/script-organization.md

skill

4,850 bytes

4d12494014b1efcc…

skills/figure-library/references/figure-organization/references/source-organization.md

skill

1,443 bytes

3b66fe7a1aa4549c…

skills/figure-library/references/figure-organization/references/workflow-lineage.md

skill

1,482 bytes

a02a5689c02a4b7d…

skills/figure-library/references/figure-style/GUIDE.md

skill

3,015 bytes

eab2e9eccfff3645…

skills/figure-library/references/figure-style/kernel.py

skill

18,978 bytes

3821c7fd19c11966…

skills/figure-library/references/figure-style/NOTICE.md

skill

367 bytes

18979d3015819b0f…

skills/figure-library/references/figure-style/references/checks.md

skill

1,612 bytes

9d4347c73a5e595a…

skills/figure-library/references/figure-style/references/python-backend.md

skill

1,973 bytes

3f7d6a09f630aa8a…

skills/figure-library/references/figure-style/references/r-backend.md

skill

1,517 bytes

052419182af9027e…

skills/figure-library/references/library-workflows.md

skill

43,040 bytes

66e4c1fe95c8197d…

skills/figure-library/SKILL.md

skill

10,141 bytes

bc233be7380419a5…

tsconfig.json

file

502 bytes

60368125388538cc…