Apache-2.0、本機優先的 AI 程式代理防毒工具，透過 pipx 安裝；支援 Codex、Claude Code、Cursor 等代理，README 暫未提供 DeepSeek Harness 適配器。
DSH 整合
生態系相關
作者聲明
安全稽核
未稽核
最後核實
2026-08-21
授權條款
Apache-2.0
01它能幫你完成什麼？
Protect AI coding-agent sessions on the same machine from risky tool calls, secret access and prompt injection
Runtime evaluation of supported shell, file, MCP, prompt, and tool-result events; safe work allowed, known threats blocked, ambiguous actions paused for approval, with security receipts stored locally
Developers running AI coding agents locally who want antivirus-style runtime protection; DeepSeek Harness users should note the README does not yet list a dsh adapter
Review AI supply-chain artifacts — plugins, skills, MCP servers, package installs — before granting trust
Pre-trust reviews plus local receipts and inventory baselines, reviewable from the terminal or the localhost dashboard
Teams that install third-party agent plugins, skills and MCP servers and want a pre-launch review gate
Gate plugin, skill and MCP-server packages with quality and security checks in CI
Quality and security grades with SARIF output via the companion `plugin-scanner` package and the published GitHub Action
Plugin maintainers publishing to agent marketplaces who need a CI quality gate
02如何將外掛接入 DeepSeek Harness？
先決條件
- Python 3.10+ (per the README's Python version badge)
- `pipx` for the recommended isolated install
安裝步驟
- 01
`pipx install hol-guard`
- 02
`hol-guard init` — discovers compatible AI agents, explains each setup change before applying it, and guides you through your first protected action
驗證整合成功
- `command -v hol-guard`
- `hol-guard --version`
復原
- `hol-guard uninstall --self` — removes Guard-managed harness wiring, package shims, local Guard state, and uninstalls the current `hol-guard` package
03DSH 整合程度與能力邊界
Standalone antivirus for AI coding agents installed via pipx; the README lists Codex, Claude Code, Cursor and others as supported agents but does not document a DeepSeek Harness (dsh) adapter
Runtime threat detection for agent actions
supported shell, file, MCP, prompt, and tool-result events from integrated agents→allow / block / pause-for-approval decisions for secrets exposure, prompt injection, unsafe commands, malicious packages and MCP risks
Installs hooks, launcher shims or managed proxies into detected agent configurationsMay pause agent actions pending human approvalApproval center & local dashboard
ambiguous or blocked agent actions→terminal approval queue (`hol-guard approvals`) and a localhost dashboard for reviewing and resolving decisions
Runs a local dashboard at http://localhost:6174Supply-chain scanning
package installs, plugins, skills, MCP servers, hooks and agent configuration→pre-trust reviews, advisory lookups and supply-chain explain traces (`hol-guard supply-chain scan / explain`)
`hol-guard advisories sync` optionally fetches a signed advisory list from advisories.hol.org and requires a Guard Cloud accountplugin-scanner CI quality gate
plugin, skill or marketplace package directories→scored scan / lint / verify / submit results in text, JSON, Markdown or SARIF, usable as a GitHub Actions gate
Separate PyPI package (`plugin-scanner`) must be installed; the GitHub Action can open submission issues when enabled
04適合誰？何時不該用？
適合
- Developers running AI coding agents locally who want antivirus-style runtime protection; DeepSeek Harness users should note the README does not yet list a dsh adapter
- Teams that install third-party agent plugins, skills and MCP servers and want a pre-launch review gate
- Plugin maintainers publishing to agent marketplaces who need a CI quality gate
不適合
- The README's supported-agent list (Codex, Claude Code, Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCode, Antigravity, Kimi Code, Grok, Pi, ZCode) does not include DeepSeek Harness — there is no documented dsh adapter, so Guard cannot be confirmed to protect dsh sessions.
- Enforcement depth varies by agent and event type — Guard prefers the strongest integration each agent exposes, and exact guarantees depend on the upstream support matrix.
- A scan or detection is not a safety guarantee; the README explicitly notes runtime benchmark fixtures are modeled rather than live attacks.
05相容性、維護與安全提醒
- The README's supported-agent list (Codex, Claude Code, Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCode, Antigravity, Kimi Code, Grok, Pi, ZCode) does not include DeepSeek Harness — there is no documented dsh adapter, so Guard cannot be confirmed to protect dsh sessions.
- Enforcement depth varies by agent and event type — Guard prefers the strongest integration each agent exposes, and exact guarantees depend on the upstream support matrix.
- A scan or detection is not a safety guarantee; the README explicitly notes runtime benchmark fixtures are modeled rather than live attacks.
Apache-2.0 · actively maintained (latest release v2.2.116, 2026-08-20)
06常見問題
HOL Guard 能保護 DeepSeek Harness（dsh）工作階段嗎？
README 未明確支援。其支援清單為 Codex、Claude Code、GitHub Copilot CLI、Cursor、Gemini CLI、Hermes、OpenClaw、OpenCode、Antigravity、Kimi Code、Grok、Pi 與 ZCode，其中不含 DeepSeek Harness；不過專案方表示，隨著新適配器加入，其防護層會擴展到更多代理。
如何安裝 HOL Guard 並確認安裝成功？
先執行 `pipx install hol-guard`，再執行 `hol-guard init`——它會偵測本機相容的代理並引導你完成第一個受保護的操作。之後可用 `command -v hol-guard` 與 `hol-guard --version` 驗證安裝。
它可以離線使用嗎？需要雲端帳號嗎？
核心防護在本機執行，不需雲端帳號。Guard Cloud 為選項，用於證據同步、團隊策略與共享核准；advisory 資料庫同步需要 Guard Cloud 帳號，未登入時會繼續使用內建的 advisory 資料。
它會對我的機器做什麼變更？
`hol-guard init` 會為偵測到的代理安裝掛鉤、啟動器 shim 或受管代理，且每項副作用都要經過初始化流程中的核准檢查點。需要移除時，執行 `hol-guard uninstall --self` 即可清除相關接線並解除安裝套件。
hol-guard 和 plugin-scanner 有什麼差別？
`hol-guard` 是面向終端使用者的防毒與執行階段防護產品；`plugin-scanner` 是面向維護者與 CI 的配套工具，在發布前對外掛、技能與 MCP 伺服器套件進行 lint、驗證與評分。
07相關的 DSH 工作流程
ruflo
作者 ruvnet
原版智慧體元框架（meta-harness）：支援多智慧體叢集部署、自主工作流編排與對話式 AI 系統構建，內建自適應記憶、自學習智慧與 RAG 檢索，原生整合 Claude Code / Codex / Hermes 等大量工具。
reactive-resume
作者 amruthpillai
注重隱私的開源簡歷生成器，安全、可定製、可移植，永久免費，支援自託管。
everos
作者 evermind-ai
為所有 AI 智慧體提供的便攜統一記憶層，本地優先、Markdown 原生、資料歸使用者所有，跨應用與工作流自進化。
yao
作者 yaoapp
在桌面、移動端、瀏覽器或 API 上統一管理你的智慧體與工作區，看板式任務追蹤，支援自託管。
08資料與來源
HOL Guard currently integrates with Codex, Claude Code, GitHub Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCo…
These developer agents are Guard's deepest integrations today, but the product boundary is broader: the same policy, sup…
此頁面根據專案公開文件、儲存庫中繼資料與 DSH Plugins 的結構化解析所產生；最後核實於 2026-08-21。發現錯誤？提交更正。
最佳 DeepSeek Harness 外掛
從全目錄挑出的 12 個值得優先安裝的外掛，涵蓋各個分類。