Agent Plugins Marketplace
← All plugins

haris

v0.3.0

Nexika haris: guards your machine and your accounts from harmful agent actions. Every tool call is read by a real shell parser (wrappers, pipes, substitutions and heredocs included) and judged by its action and target: safe reads and project runs are approved, risky actions are asked about, dangerous ones are refused with a plain reason. Secrets, persistence spots and haris itself are protected, data leaving the machine is checked for secrets, prompt injection in tool output is flagged, and approvals count only when you type them.

Claude Code4 Skills

By Loai ElattarLicense: MIT0 GitHub starsUpdated last week

Directory evidence

Runtimes
Claude Code
Parsed components
4 skill or MCP entries
Source updated
Oct 10, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install haris for Claude Code

Installs for the current user
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install haris@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/nexika/nexika

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/haris/.

Plugin files

plugins/haris/
├── .claude-plugin/plugin.json
├── skills/allow/SKILL.md
├── skills/audit/SKILL.md
├── skills/status/SKILL.md
└── skills/why/SKILL.md

Included Skills4

allowskills/allow/SKILL.md

Approve one exact command or path that haris asked about or refused - typed by the user only, never by Claude. Forms - /haris:allow <exact command>, /haris:allow read <path>, /haris:allow write <path>, --project to keep it for this project, --remove to take one back, nothing to list them.

auditskills/audit/SKILL.md

Review haris's audit log - every ask, refusal, approval and prompt-injection warning with time, tool, class and the redacted command - for this project or all projects. Use when the user asks "what did haris block this week", "show the haris log", "audit", "سجل haris".

statusskills/status/SKILL.md

Show how haris is protecting this project - profile (relaxed, standard, strict), mode (on or watch), settings and extra rules, whether the session is marked after a prompt-injection warning, approvals, and counts of the last week's asks and refusals. Use when the user asks "is haris on", "what does haris protect", "haris settings", "حالة haris".

whyskills/why/SKILL.md

Explain why haris asked about or refused an action - what it saw, what the risk is, and the safe way forward. Use when the user asks "why was this blocked", "why did haris ask", "what did haris stop", "لماذا تم الرفض", or right after a haris refusal the user wants to understand.

Plugin manifests1

plugins/haris/.claude-plugin/plugin.json
{
  "name": "haris",
  "description": "Nexika haris: guards your machine and your accounts from harmful agent actions. Every tool call is read by a real shell parser (wrappers, pipes, substitutions and heredocs included) and judged by its action and target: safe reads and project runs are approved, risky actions are asked about, dangerous ones are refused with a plain reason. Secrets, persistence spots and haris itself are protected, data leaving the machine is checked for secrets, prompt injection in tool output is flagged, and approvals count only when you type them.",
  "version": "0.3.0",
  "author": {
    "name": "Loai Elattar"
  },
  "license": "MIT",
  "keywords": [
    "nexika",
    "security",
    "guard",
    "permissions",
    "prompt-injection",
    "secrets",
    "hooks"
  ]
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[haris on Agent Plugins Marketplace](https://pluginsmp.com/plugins/haris)