Apache-2.0、本地优先的 AI 编程智能体杀毒工具，通过 pipx 安装；支持 Codex、Claude Code、Cursor 等代理，README 暂未提供 DeepSeek Harness 适配器。
DSH 适配
生态相关
作者声明
安全审计
未审计
最后核验
2026-08-21
许可证
Apache-2.0
01它能帮你完成什么？
Protect AI coding-agent sessions on the same machine from risky tool calls, secret access and prompt injection
Runtime evaluation of supported shell, file, MCP, prompt, and tool-result events; safe work allowed, known threats blocked, ambiguous actions paused for approval, with security receipts stored locally
Developers running AI coding agents locally who want antivirus-style runtime protection; DeepSeek Harness users should note the README does not yet list a dsh adapter
Review AI supply-chain artifacts — plugins, skills, MCP servers, package installs — before granting trust
Pre-trust reviews plus local receipts and inventory baselines, reviewable from the terminal or the localhost dashboard
Teams that install third-party agent plugins, skills and MCP servers and want a pre-launch review gate
Gate plugin, skill and MCP-server packages with quality and security checks in CI
Quality and security grades with SARIF output via the companion `plugin-scanner` package and the published GitHub Action
Plugin maintainers publishing to agent marketplaces who need a CI quality gate
02如何接入 DeepSeek Harness？
前置条件
- Python 3.10+ (per the README's Python version badge)
- `pipx` for the recommended isolated install
安装步骤
- 01
`pipx install hol-guard`
- 02
`hol-guard init` — discovers compatible AI agents, explains each setup change before applying it, and guides you through your first protected action
验证接入成功
- `command -v hol-guard`
- `hol-guard --version`
回滚
- `hol-guard uninstall --self` — removes Guard-managed harness wiring, package shims, local Guard state, and uninstalls the current `hol-guard` package
03DSH 适配与能力边界
Standalone antivirus for AI coding agents installed via pipx; the README lists Codex, Claude Code, Cursor and others as supported agents but does not document a DeepSeek Harness (dsh) adapter
Runtime threat detection for agent actions
supported shell, file, MCP, prompt, and tool-result events from integrated agents→allow / block / pause-for-approval decisions for secrets exposure, prompt injection, unsafe commands, malicious packages and MCP risks
Installs hooks, launcher shims or managed proxies into detected agent configurationsMay pause agent actions pending human approvalApproval center & local dashboard
ambiguous or blocked agent actions→terminal approval queue (`hol-guard approvals`) and a localhost dashboard for reviewing and resolving decisions
Runs a local dashboard at http://localhost:6174Supply-chain scanning
package installs, plugins, skills, MCP servers, hooks and agent configuration→pre-trust reviews, advisory lookups and supply-chain explain traces (`hol-guard supply-chain scan / explain`)
`hol-guard advisories sync` optionally fetches a signed advisory list from advisories.hol.org and requires a Guard Cloud accountplugin-scanner CI quality gate
plugin, skill or marketplace package directories→scored scan / lint / verify / submit results in text, JSON, Markdown or SARIF, usable as a GitHub Actions gate
Separate PyPI package (`plugin-scanner`) must be installed; the GitHub Action can open submission issues when enabled
04适合谁？何时不该用？
适合
- Developers running AI coding agents locally who want antivirus-style runtime protection; DeepSeek Harness users should note the README does not yet list a dsh adapter
- Teams that install third-party agent plugins, skills and MCP servers and want a pre-launch review gate
- Plugin maintainers publishing to agent marketplaces who need a CI quality gate
不适合
- The README's supported-agent list (Codex, Claude Code, Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCode, Antigravity, Kimi Code, Grok, Pi, ZCode) does not include DeepSeek Harness — there is no documented dsh adapter, so Guard cannot be confirmed to protect dsh sessions.
- Enforcement depth varies by agent and event type — Guard prefers the strongest integration each agent exposes, and exact guarantees depend on the upstream support matrix.
- A scan or detection is not a safety guarantee; the README explicitly notes runtime benchmark fixtures are modeled rather than live attacks.
05兼容性、维护与安全提示
- The README's supported-agent list (Codex, Claude Code, Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCode, Antigravity, Kimi Code, Grok, Pi, ZCode) does not include DeepSeek Harness — there is no documented dsh adapter, so Guard cannot be confirmed to protect dsh sessions.
- Enforcement depth varies by agent and event type — Guard prefers the strongest integration each agent exposes, and exact guarantees depend on the upstream support matrix.
- A scan or detection is not a safety guarantee; the README explicitly notes runtime benchmark fixtures are modeled rather than live attacks.
Apache-2.0 · actively maintained (latest release v2.2.116, 2026-08-20)
06常见问题
HOL Guard 能保护 DeepSeek Harness（dsh）会话吗？
README 未给出明确支持。其支持列表为 Codex、Claude Code、GitHub Copilot CLI、Cursor、Gemini CLI、Hermes、OpenClaw、OpenCode、Antigravity、Kimi Code、Grok、Pi 和 ZCode，其中不含 DeepSeek Harness；不过项目方表示，随着新适配器加入，其防护层会扩展到更多智能体。
如何安装 HOL Guard 并确认安装成功？
先执行 `pipx install hol-guard`，再运行 `hol-guard init`——它会发现本机兼容的智能体并引导你完成首个受保护的操作。之后可用 `command -v hol-guard` 和 `hol-guard --version` 验证安装。
它可以离线使用吗？需要云账号吗？
核心防护在本地运行，无需云账号。Guard Cloud 是可选项，用于证据同步、团队策略和共享审批；advisory 数据库同步需要 Guard Cloud 账号，未登录时会继续使用本地内置的 advisory 数据。
它会对我的机器做什么改动？
`hol-guard init` 会为检测到的智能体安装钩子、启动器 shim 或托管代理，且每项副作用都要经过初始化流程中的批准检查点。需要移除时，运行 `hol-guard uninstall --self` 即可清除相关接线并卸载包。
hol-guard 和 plugin-scanner 有什么区别？
`hol-guard` 是面向终端用户的杀毒与运行时防护产品；`plugin-scanner` 是面向维护者和 CI 的配套工具，在发布前对插件、技能和 MCP 服务器包进行 lint、验证和评分。
07相关的 DSH 工作流
ruflo
作者 ruvnet
原版智能体元框架（meta-harness）：支持多智能体集群部署、自主工作流编排与对话式 AI 系统构建，内置自适应记忆、自学习智能与 RAG 检索，原生集成 Claude Code / Codex / Hermes 等大量工具。
reactive-resume
作者 amruthpillai
注重隐私的开源简历生成器，安全、可定制、可移植，永久免费，支持自托管。
everos
作者 evermind-ai
为所有 AI 智能体提供的便携统一记忆层，本地优先、Markdown 原生、数据归用户所有，跨应用与工作流自进化。
yao
作者 yaoapp
在桌面、移动端、浏览器或 API 上统一管理你的智能体与工作区，看板式任务追踪，支持自托管。
08数据与来源
HOL Guard currently integrates with Codex, Claude Code, GitHub Copilot CLI, Cursor, Gemini CLI, Hermes, OpenClaw, OpenCo…
These developer agents are Guard's deepest integrations today, but the product boundary is broader: the same policy, sup…
页面基于项目公开文档、仓库元数据和 DSH Plugins 的结构化解析生成；最后核验于 2026-08-21。发现错误？提交更正。
最佳 DeepSeek Harness 插件
从全目录挑出的 12 个值得优先安装的插件，覆盖各个分类。