Skip to content

docs: add AREX-Skill to community plugins - #388

Merged
kantorcodes merged 1 commit into
hashgraph-online:mainfrom
hanhainebula:main
Sep 22, 2026
Merged

kantorcodes merged 1 commit into
hashgraph-online:mainfrom
hanhainebula:main

Conversation

@hanhainebula

Copy link
Copy Markdown
Contributor

No description provided.

@github-actions

github-actions Bot commented Sep 20, 2026 •

Copy link
Copy Markdown
Contributor

Contribution check passed. @hanhainebula, the required catalog checks passed.

The centralized source scan returned: failure. Source scanning is advisory for this catalog, so this does not block the PR.

Recommended: add scanner CI for security

This listing can merge without it. HOL still scans VectorSpaceLab/AREX-Skill independently.

We recommend including hashgraph-online/ai-plugin-scanner-action under .github/workflows/ on push and pull_request. It gives the project continuous security checks and improves the HOL Registry trust score shown by the trust badge.

Adding it:

  • catches secrets, dangerous hooks, supply-chain issues, and other risky changes before they ship;
  • removes the 10% trust-score reduction applied when maintainer scanner CI is missing, so the Registry badge reflects the full trust score;
  • can surface findings in GitHub code scanning.

See SCANNER_GUIDE.md for the recommended workflow.

View the latest sweep.

@kantorcodes kantorcodes left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The centralized scan is 53/100, below the 80 merge threshold, with 405 high findings and one low finding. Please remediate or document the rule-level findings; if AREX-Skill lacks source scanner CI, add the SHA-pinned HOL Plugin Scanner workflow from the current SCANNER_GUIDE.md, reproduce with the same pinned scanner, link the source run, rerun the centralized catalog scan, and request re-review once the score is at least 80 and required checks are green.

@kantorcodes
kantorcodes dismissed their stale review September 22, 2026 10:25

Centralized scanning and source-repository scanner CI are advisory under the current repository policy, so this review no longer represents merge requirements.

@kantorcodes
kantorcodes merged commit a557385 into hashgraph-online:main Sep 22, 2026
4 of 5 checks passed
@github-actions

Copy link
Copy Markdown
Contributor

@hanhainebula, this contribution is merged into HOL's catalog.

Claim your plugin

Still syncing

These repositories are merged into HOL's catalog but are not live in the HOL Registry yet:

  • vectorspacelab/arex-skill

No action is needed yet. Once the listing appears in the Registry, ownership verification will be available from the plugin dashboard.

@kantorcodes

Copy link
Copy Markdown
Member

Hi @hanhainebula — a quick follow-up about your plugin vectorspacelab/arex-skill.

The listing is live in the HOL Registry, and ownership verification is still available at HOL Guard.

Verify ownership with the GitHub account that owns the repository to unlock the owner-verified badge, plugin analytics, and the author dashboard. No repository write access is needed.

We may follow up again later if ownership verification is still incomplete.

If you already completed verification, no action is needed — the next scheduler run will stop these reminders.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants