| name | hol-guard |
| description | Install, initialize, repair, or check local HOL Guard security protection for OpenClaw. |
| version | 1.0.0 |
| homepage | https://hol.org/guard |
| user-invocable | true |
| disable-model-invocation | true |
HOL Guard for OpenClaw
Use this skill only when the user explicitly asks to install, enable, initialize, repair, or check HOL Guard.
HOL Guard is a separate open-source local runtime package. This ClawHub skill is a discovery and setup surface. The hol-guard CLI remains the security authority and owns OpenClaw integration, policy, approvals, and evidence.
Canonical source: https://github.com/hashgraph-online/hol-guard
Check current state
Start with read-only checks:
command -v hol-guard
If Guard is installed, run:
hol-guard --version
hol-guard status
Report only what the CLI proves. Installing this skill alone does not mean runtime protection is active.
If the user asked only to check Guard, stop after hol-guard status. Do not install or initialize Guard.
Install or initialize
Continue with setup only when the user explicitly asked to install, enable, initialize, or repair Guard.
If hol-guard is missing, explain that the next command changes the user's Python/pipx environment and obtain explicit approval before running it:
pipx install hol-guard
If pipx is unavailable, stop and tell the user that the documented HOL Guard install path requires pipx. Do not silently switch package managers and do not execute a remote bootstrap script as a fallback.
After Guard is available, initialize protection interactively:
hol-guard init
Do not add unattended flags unless the user explicitly requests unattended setup. hol-guard init owns the real OpenClaw integration and avoids maintaining a second enforcement implementation in this skill.
Verify the resulting state:
hol-guard status
If protection is degraded, report the failed layer and let the Guard CLI or core documentation drive repair. Do not manually rewrite OpenClaw configuration from this skill unless the core HOL Guard documentation explicitly requires it.
Local-first boundary
Guard Cloud is optional. Do not require sign-in, credentials, or cloud connectivity for local OpenClaw protection. Offer cloud connection only if the user asks for synchronized history, shared policy, fleet visibility, or team approvals.
Safety rules
- Never read
.env files or unrelated credential stores.
- Never bypass Guard approvals.
- Never claim protection is active without
hol-guard status proving it.
- Do not execute code from unrelated repositories as part of setup.
- Keep this package as a setup and discovery companion. Do not add a second OpenClaw enforcement implementation here.
