holster plugins

nauta-ai/holster

Plugin Claude Code

Local-first scanner for AI-hallucinated and typosquatted package imports, plus agent boundary checks (what an agent inherits: shell env, file scope, MCP tools). Run holster-scan . before an agent touches a repo or you ship AI-generated code. Install: pip install holster-scan.

nauta-ai/holster

Plugin Claude Code

Preflight security for AI-agent development. Run holster guard . to get a RUN verdict and a SHARE verdict on a repo before you hand it to an AI agent, commit it, or share it — catches live API keys, MCP servers that run unpinned code, and credential files missing from .gitignore. Local-first; the repo never leaves yo.