# HOL Plugin Security
> Catalog scores, modeled HOL Guard runtime fixtures, and public advisories mapped to OWASP MCP Top 10 (beta). Not a complete MCP security program. Scan is not a safety guarantee. 205 catalog plugins, not Registry Broker agent counts. Runtime fixtures are modeled. HOL publishes this.

- Dataset: https://huggingface.co/datasets/HashgraphOnline/hol-plugin-security
- Config `owasp_map` (10 rows): honest detect / prevent / gap per MCP01-MCP10. `complete_program` is always false.
- Explorer (static Space): https://huggingface.co/spaces/HashgraphOnline/hol-plugin-security
- Collection: https://huggingface.co/collections/HashgraphOnline/hol-plugin-security
- OWASP MCP Top 10 mapping (live): https://hol.org/guard/security/owasp-mcp-top-10
- Plugins catalog: https://hol.org/plugins
- HOL Guard: https://hol.org/guard
- Guard llms.txt: https://hol.org/guard/llms.txt
- MCP security hub: https://hol.org/guard/security/mcp
- Skills hub: https://hol.org/guard/security/skills
- Supply-chain hub: https://hol.org/guard/security/supply-chain
- Protect secrets guide: https://hol.org/guard/guides/protect-secrets-from-ai-coding-agents