harness

In the author's own words, from each skill's SKILL.md.

• harness

  No description in the SKILL.md.

  SKILL.md on GitHub (opens in a new tab)

• android-vuln-analyzer

  No description in the SKILL.md.

  bundled-skills/android-vuln-analyzer/SKILL.md on GitHub (opens in a new tab)

• design-review

  Dispatch an independent challenger agent to adversarially review a spec or implementation plan against the actual codebase. Catches hallucinated APIs, wrong field names, nonexistent files, and incorrect assumptions. Two modes: (1) spec review — verifies DB model fields, API paths, config attributes, file paths referenced in a design spec, (2) plan review — verifies imports, function signatures, c…

  bundled-skills/design-review/SKILL.md on GitHub (opens in a new tab)

• explore

  Graph-driven project understanding using code-review-graph (CRG). Query architecture, modules, callers/callees, impact radius, hotspots, execution flows, and search nodes. Use when: (1) brainstorming and need to understand project structure, (2) writing plans and need impact analysis, (3) user says "understand this project", "how does this module work", "impact analysis", "/explore", (4) reviewin…

  bundled-skills/explore/SKILL.md on GitHub (opens in a new tab)

• graph

  Manage code knowledge graphs via code-review-graph (CRG). Build, update, and check status of project code graphs stored in .code-review-graph/graph.db. Use when: (1) user says "build graph", "update graph", "graph status", "/graph", (2) Harness init detects CRG, (3) preparing to use /explore commands. Gracefully degrades if CRG is not installed.

  bundled-skills/graph/SKILL.md on GitHub (opens in a new tab)

• harness-audit

  No description in the SKILL.md.

  bundled-skills/harness-audit/SKILL.md on GitHub (opens in a new tab)

• harness-cleanup

  No description in the SKILL.md.

  bundled-skills/harness-cleanup/SKILL.md on GitHub (opens in a new tab)

• harness-guide

  No description in the SKILL.md.

  bundled-skills/harness-guide/SKILL.md on GitHub (opens in a new tab)

• harness-handoff

  No description in the SKILL.md.

  bundled-skills/harness-handoff/SKILL.md on GitHub (opens in a new tab)

• harness-help

  No description in the SKILL.md.

  bundled-skills/harness-help/SKILL.md on GitHub (opens in a new tab)

• harness-quality-gate

  No description in the SKILL.md.

  bundled-skills/harness-quality-gate/SKILL.md on GitHub (opens in a new tab)

• harness-resume

  No description in the SKILL.md.

  bundled-skills/harness-resume/SKILL.md on GitHub (opens in a new tab)

• sca-ai-denoise

  SCA 漏洞 AI 降噪与风险优先级评估。对 Grype/Snyk/Xray 等 SCA 工具的漏洞发现进行多维度风险评估，按 P0-P3 分级，过滤噪音（DoS、本地提权、低影响信息泄露），聚焦真正可利用的高风险漏洞。当用户需要对 SCA 扫描结果降噪、漏洞优先级排序、或供应链风险评估时使用。

  bundled-skills/sca-ai-denoise/SKILL.md on GitHub (opens in a new tab)

• security-review-skill-creator

  生成安全审计 skill。两种模式：(1) 项目模式——根据项目文档生成定制化审计 skill；(2) 通用模式——仅指定语言+框架，从参考资料库生成通用审计 skill。当用户想创建安全审计 skill、生成审计规则、或提到"生成安全审计skill"、"创建code review skill"、"生成 Java 审计 skill"时使用。

  bundled-skills/security-review-skill-creator/SKILL.md on GitHub (opens in a new tab)

• security-review-skill-for-docker

  审计 Docker/容器部署安全。检测 Dockerfile、docker-compose.yml、Kubernetes manifests 中的安全问题：特权容器、root 运行、敏感挂载、资源无限制、密钥泄露、Base Image 不合规、网络暴露等。当审计容器配置、Docker 安全、K8s 部署安全、或检查基础设施安全时使用。支持 Dockerfile、docker-compose.yml、Kubernetes YAML、Helm charts。

  bundled-skills/security-review-skill-for-docker/SKILL.md on GitHub (opens in a new tab)

• security-review-skill-for-terraform

  审计 Terraform / IaC 代码安全（AWS 基础设施）。检测硬编码凭据、过宽 Security Group(0.0.0.0/0)、IAM 权限过大(Action/Resource *)、S3 公开访问、RDS 未加密/公开、State 文件泄露、ECS/EKS 容器特权、CloudTrail/VPC FlowLog 缺失、不安全 Provider/Module 引用等。当审计 Terraform 代码、IaC 安全评审、AWS 云基础设施配置检查、GitOps 安全审计时使用。支持 HCL(.tf)、Terraform JSON、tfvars、Terragrunt(HCL) 代码。

  bundled-skills/security-review-skill-for-terraform/SKILL.md on GitHub (opens in a new tab)

• skill-creator

  Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.

  bundled-skills/skill-creator/SKILL.md on GitHub (opens in a new tab)

• skills-audit

  Audit AI Agent skills for security vulnerabilities including malicious code, remote execution, credential leaks, and supply chain risks. Use when reviewing third-party skills, investigating suspicious behavior, or performing security assessments.

  bundled-skills/skills-audit/SKILL.md on GitHub (opens in a new tab)

• supply-chain-audit

  多语言供应链投毒检测。支持 python（.pth投毒/setup.py hooks）、npm（postinstall hooks/eval混淆）、go（init() 后门/go:generate）、rust（build.rs）、ruby（extconf.rb）、java（Maven plugin/Gradle exec）、php（composer scripts）。当用户担心供应链安全、想检查依赖投毒、或提到 litellm/ua-parser-js/event-stream 等供应链攻击事件时使用。

  bundled-skills/supply-chain-audit/SKILL.md on GitHub (opens in a new tab)

• web-vuln-analyzer

  No description in the SKILL.md.

  bundled-skills/web-vuln-analyzer/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• superpowersby obra An agentic skills framework & software development methodology that works. 300k stars · 15 skills
• skillsby mattpocock Skills for Real Engineers. Straight from my .agents directory. 293k stars · 30 skills
• ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod… 280k stars · 30 skills
• reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries. 270k stars · 1 skill
• andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls. 220k stars · 1 skill
• skillsby anthropics Public repository for Agent Skills 181k stars · 19 skills