AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Agent Harness Design

skill-anastasiyaw-codex-claude-code-config-agent-harness-design · by AnastasiyaW

Designing agent harnesses and tool systems — risk taxonomy for tools, permission decisions, draft/commit pattern, structured tool results, agent budgets (10 types), context trust labels against prompt injection, plan-artifact, approval records, observability and traces, evals (13 categories), event model, streaming buffering, 3rd-party skill install checklist, agentic RAG, self-improving SOP loop…

↗ Repository
— No reviews yet
0 installs
21 views
0.0% view→install

Install

$ agentstack add skill-anastasiyaw-codex-claude-code-config-agent-harness-design

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-anastasiyaw-codex-claude-code-config-agent-harness-design)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 15d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Agent Harness Design? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Agent Harness Design

Eleven operational reference sheets for designing a safe, observable agent harness. They are situational — load only the one(s) relevant to the current task from references/ (this is why they live in a skill rather than always-on rules: building an agent harness is occasional, so the detail should not bloat every session's context).

  • references/agent-tool-design.md — 15-class risk taxonomy, 7-type permission decision object, draft/commit naming, structured tool results, deferred tool loading, hosted vs client tools, connector code-execution pattern.
  • references/context-trust-labels.md — trusted / semi_trusted / untrusted labels + verbatim boundary statement; prompt-injection defense.
  • references/agent-budgets.md — 10 mandatory budget types every agent loop must declare.
  • references/agent-evals.md — 13 eval categories + 13 adversarial test cases + when to add regression evals.
  • references/agent-observability.md — 16 trace fields per model call, 7-question audit, 6-step incident response.
  • references/agentic-rag-model-policy.md — self-improving agentic RAG state, specialist roles, evaluation vectors, Pareto selection, OpenAI model/effort policy, and Programmatic Tool Calling adoption gates.
  • references/agent-plan-artifact.md — planning mode, plan artifact format (10 fields), plan-validate-execute.
  • references/agent-approval-records.md — approval request/result JSON schemas, scope/expiration, no self-approval.
  • references/agent-streaming.md — buffering for incremental tool calls when stream=True; abort handling; output guardrail modes.
  • references/agent-event-model.md — 13 typed events for harness state persistence (replay/audit/compaction/evals).
  • references/agent-skill-install-checklist.md — pre/during/post install + audit + incident response for 3rd-party skills.

Source: distilled from the agents-best-practices skill (Denis Sergeevitch, MIT) + Anthropic harness-design engineering. Read the specific reference before applying — do not work from this index alone.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Cloud & Infrastructure