HOL Guard

Policy engine that intercepts an AI agent's shell commands, file access, package installs and MCP tool calls, then allows, blocks or requests approval. Aims to stop prompt injection, secret exfiltration and malicious packages, plugins and skills at runtime. Installs from PyPI and runs locally.