AgentStack
Sign in Publish
MCP servers Skills Toolkits Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Agent Harness Design

skill-anastasiyaw-claude-code-config-agent-harness-design · by AnastasiyaW

Designing agent harnesses and tool systems — risk taxonomy for tools, permission decisions, draft/commit pattern, structured tool results, agent budgets (10 types), context trust labels against prompt injection, plan-artifact, approval records, observability and traces, evals (13 categories), event model, streaming buffering, 3rd-party skill install checklist. Use when building a new Agent SDK ap…

↗ Repository
— No reviews yet
0 installs
17 views
0.0% view→install

Install

$ agentstack add skill-anastasiyaw-claude-code-config-agent-harness-design

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Agent Harness Design? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Agent Harness Design

Ten operational reference sheets for designing a safe, observable agent harness. They are situational — load only the one(s) relevant to the current task from references/ (this is why they live in a skill rather than always-on rules: building an agent harness is occasional, so the detail should not bloat every session's context).

  • references/agent-tool-design.md — 15-class risk taxonomy, 7-type permission decision object, draft/commit naming, structured tool results, deferred tool loading, hosted vs client tools, connector code-execution pattern.
  • references/context-trust-labels.md — trusted / semi_trusted / untrusted labels + verbatim boundary statement; prompt-injection defense.
  • references/agent-budgets.md — 10 mandatory budget types every agent loop must declare.
  • references/agent-evals.md — 13 eval categories + 13 adversarial test cases + when to add regression evals.
  • references/agent-observability.md — 16 trace fields per model call, 7-question audit, 6-step incident response.
  • references/agent-plan-artifact.md — planning mode, plan artifact format (10 fields), plan-validate-execute.
  • references/agent-approval-records.md — approval request/result JSON schemas, scope/expiration, no self-approval.
  • references/agent-streaming.md — buffering for incremental tool calls when stream=True; abort handling; output guardrail modes.
  • references/agent-event-model.md — 13 typed events for harness state persistence (replay/audit/compaction/evals).
  • references/agent-skill-install-checklist.md — pre/during/post install + audit + incident response for 3rd-party skills.

Source: distilled from the agents-best-practices skill (Denis Sergeevitch, MIT) + Anthropic harness-design engineering. Read the specific reference before applying — do not work from this index alone.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Cloud & Infrastructure