Install any skill in seconds. Free to start, no credit card required.
Get Started Free →hashgraph-online/hol-guard-skill-guidance
Use this guidance when an AI agent is about to add or update dependencies.
Passed 21 of 22 test cases with the skill, and 10 of 22 without it.
and 10 more in the full report
11 fixed10 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
Write the exact shell command to safely execute clean dependency installs during GitHub Actions workflow builds.
| Checked | Without skill | With skill |
|---|---|---|
| Outputs hol-guard protect -- npm ci | Missed | Passed |
The instructions your model reads when the skill loads.
Use this guidance when an AI agent is about to add or update dependencies.
hol-guard protect --dry-run -- npm install <package>hol-guard supply-chain scan --jsonhol-guard supply-chain explain <package>@<version> --ecosystem <ecosystem>hol-guard package-shims status --jsonhol-guard package-shims repair --manager npm --jsonCursor has two protection surfaces. Cursor editor covers MCP servers in .cursor/mcp.json. Cursor CLI covers the cursor-agent command path. Keep them distinct when activating, checking, repairing, or removing Guard.
hol-guard apps connect cursor --surface editorhol-guard apps connect cursor --surface clihol-guard apps test cursor --surface editorhol-guard apps test cursor --surface clihol-guard apps repair cursor --surface editorhol-guard apps repair cursor --surface clihol-guard apps disconnect cursor --surface editor --confirm disconnect-cursorhol-guard apps disconnect cursor --surface cli --confirm disconnect-cursorGuard owns trust checks, drift repair, redacted receipts, and Cloud sync. Cursor owns its native editor and CLI behavior. If a surface is missing, unsupported, or unavailable, report that state instead of inventing an install URL or fallback command.
test cases passed, vs 10 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.