huqan

Name: huqan Review
Item: huqan
Rating: 2.0
Author: Aaron Matthews

Skill Security Poor

Works inClaude Code

Poor Scanned — metadata only

Enterprises deploying AI agents face liability and compliance risks from unverified agent decisions.

Local-first verification layer for AI agents: evidence, provenance, policy gates, human approval, and auditable Trust Receipts before a claim, memory write, or action is trusted.

Ask Claude to verify an AI agent's claim meets your security policy before trusting it.
Generate an auditable trust receipt documenting evidence and approvals for each agent action.
Automate human approval gates so agents cannot write memories or execute actions without verification.

37 starsApache-2.0 (commercial OK)FreeQuick setup

Below standard — Significant caveats apply. Not recommended without careful review of the security and evaluation sections.

Why it matters

Enterprises deploying AI agents face liability and compliance risks from unverified agent decisions. Huqan provides auditable proof of agent reasoning and human oversight, reducing regulatory exposure and enabling post-incident forensics.

Best for

Security teams and compliance officers implementing AI agent governance with mandatory audit trails and approval workflows.

Works in

Claude Code Claude Cowork Claude Chat

Source

https://github.com/ali-ulu/huqan

By ali-ulu

How to Get It

Option 1: Claude Desktop App (Code Mode)Click the + button next to the prompt box → Plugins → Add plugin. Search and click Install. Skills work in Claude Code only.

Option 2: Paste into Claude CodeCopy the command below and paste it into your conversation. Claude will install it.

Command

claude plugins install ali-ulu/huqan

Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.

Auto-generated from the tool's public listing — not hands-on verified. Cross-check against the source repo's README before running.

First thing to try

After installing, paste this into Claude:

Verify an AI agent's claim meets my security policy before trusting it

CostFree

Trust Signals Auto-scanned

Stars37Contributors28Last updated2026-10-29LicenseApache-2.0 (OK for commercial use)Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-10-29 · scanner v1

Community Pulse New

No community discussions found yet. This doesn't mean the tool isn't good — it may be new or serve a niche use case.

Reviewer notes

Auto-scanned review. These are observations, not a security certification.

Scored from trust signals (evidence-eval-v1): 30 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.

Things to check

Scanned, not hands-on tested — this entry was auto-scanned from public metadata (GitHub metrics, license, security flags). No reviewer has run it, and no tool-specific limitations have been documented yet.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation Scores

Evaluation

Ease of Use

1/5

Versatility

2/5

Reliability

3/5

Security

3/5

Overall score2.05 / 5.00 PoorEvaluatedOct 2026

Scored from trust signals (evidence-eval-v1): 30 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.

← Back to the Claude Observatory