Add HOL Guard agent security skill

[kantorcodes]

Submit a Skill

Skill Info

• Skill name (folder name): hol-guard
• Short description: Helps Goose users set up HOL Guard for supported coding-agent harnesses and scan Agent Skills, plugins, MCP servers, and agent packages before trust.
• Author / handle: hashgraph-online
• Version: 1.0

Structure Checklist

• My skill is in a top-level folder (hol-guard/)
• The folder contains a SKILL.md file
• SKILL.md includes valid YAML frontmatter:
  • name
  • description
  • author
  • version
  • tags (list of strings)
• No supporting files are required for this standalone skill

Security Acknowledgement

• This skill does not contain malicious behavior
• This skill does not attempt to exfiltrate secrets, tokens, or credentials
• This skill does not contain obfuscated payloads
• I understand that all submissions run through automated security scanning
• I understand this PR may be rejected if it fails validation or security review

Additional Notes

HOL Guard is an Apache-2.0 local-first security runtime maintained by Hashgraph Online. The skill uses the real hol-guard CLI for supported harness protection, approvals, receipts, and evidence, and the separate plugin-scanner CLI for pre-trust package verification. It does not claim that Goose itself is a HOL Guard runtime target; the Goose value here is an installable security workflow from the official Agent Skills marketplace.

Project: https://hol.org/guard
Source: https://github.com/hashgraph-online/hol-guard

Disclosure: I maintain HOL Guard / Hashgraph Online. This contribution was prepared with AI assistance.