HOL Plugins

It takes one line to install a plugin for your coding assistant, and from then on the plugin can reach every file the assistant can. The pick often rests on a GitHub star count and a hopeful look at the README. Every add-on in the searchable HOL Plugins catalog, built for Claude Code, Codex, Cursor and other AI coding tools, carries a trust score you can read before installing.

The score combines six areas, from maintenance and provenance to publisher quality and the result of a security scan. A plugin page breaks the score down and lists each scanner finding next to the exact commit that was checked. The site describes the scan as static catalog scoring and says it is no safety guarantee. Pick your assistant in the catalog header, and every card shows the install command for that tool.

By the site's own count, the catalog holds close to 49,000 plugins, from single skills to MCP servers that connect an assistant to outside services. Publishers add their own by connecting GitHub and pointing to a public repository. Featured slots at the top are paid for and labelled "Sponsored", with a promise that payment never changes search or trust scores. The security data behind the scores is published on Hugging Face as an open dataset with an Apache-2.0 licence.