Files
mariadb-MikeZinnerandClaude Opus 5.5 77c4ec02fa catalog: re-pin mariadb-dev and mariadb-guard, drop mariadb-sql
Addresses the review at c188e641:

- mariadb-sql is dropped: a subset of mariadb-dev.
- sha moves to fde0a1f, where the mariadb-dev launcher installs exactly
  mariadb-shell v26.10.4 with the installer from a fixed commit, checks
  the package against SHA256SUMS committed in the plugin, has no
  prerelease fallback and reads no GitHub credentials. The disclosure
  says so.
- mariadb-guard's description names mariadb-dev as the plugin to install
  it with.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-02 14:27:44 -08:00

19 lines
892 B
YAML

name: mariadb-guard
title: MariaDB Guard
repo: https://github.com/mariadb/ai-plugins
sha: fde0a1f084f42106fbb609f372558e82e54219c4
subdir: hermes/guard-plugin
version: "26.10.6"
description: "Companion to mariadb-dev; install it together with mariadb-dev, whose MCP server it redirects to. A pre_tool_call hook that blocks the agent from running the mariadb/mysql command-line clients (and similar) for what the mariadb MCP tools do, so no database password reaches a command line, plus a short system-prompt rule saying so. Pure Python, no dependencies, no network calls, no file access. Setting MARIADB_PLUGIN_ALLOW_CLI=1 disables it."
maintainer: MariaDB
tier: community
category: tools
docs_url: https://github.com/mariadb/ai-plugins#hermes-agent
readme: true
platforms: []
capabilities:
provides_tools: []
provides_hooks: [pre_tool_call]
provides_middleware: []
requires_env: []