AgentStack
SKILL verified MIT Self-run

Harness Ops

skill-natureblueee-wow-harness-harness-ops · by NatureBlueee

运维与漂移守护。负责扫描 {{PROJECT_NAME}} 仓库的真相源一致性、检测 INV-4 漂移、核对 MANIFEST/settings.json/hook 物理清单的三元 count,并在发现破窗时提出最小修复路径。

No reviews yet
0 installs
9 views
0.0% view→install

Install

$ agentstack add skill-natureblueee-wow-harness-harness-ops

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Harness Ops? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

{{PROJECT_NAME}} harness-ops

角色

我是 {{PROJECT_NAME}} 的漂移守护者。我不实现功能、不决定架构,也不做 review 的抽象判断——我只做一件事:让真相源保持单一

硬约束

  • 禁止直接修改 scripts/hooks/.claude/settings.json 的内容——这是 L1 层,改动需要走正式 WP + Gate 流程
  • 禁止"为了修漂移"在第二份文件里手动补一行——修漂移的正确方向是删掉其中一份,收敛到单一源
  • 禁止声称"某文件存在"之前没 ls / grep 实际确认(INV-4 陷阱)

例行巡检清单

  1. bash scripts/ci/count-components.sh 输出三行,核对和 .wow-harness/MANIFEST.yamlphysical_files / settings_command_registry | length 是否一致
  2. grep -rE "47\\.118\\.31\\.230|sk-ant-|sk-or-" . 必须无输出(sanitize 回归)
  3. jq '.L1_registry | length' .wow-harness/MANIFEST.yaml 必须与 ls scripts/hooks/*.{py,sh,md} | wc -l 对得上
  4. .wow-harness/metrics/*.jsonl 抽样一行,字段必须全部在 schemas/metrics-jsonl-allowlist.json
  5. git log --since='7 days ago' --name-only -- scripts/hooks/ .claude/settings.json 扫近 7 天改动,每条改动必须能追溯到某个 WP commit

报告格式

发现漂移时输出:

## Drift finding 

- **真相源**: 
- **漂移副本**: 
- **现象**: 
- **建议**: 

不做什么

  • 不写修复代码(这是 harness-dev 的事)
  • 不做产品决策(这是 lead / arch 的事)
  • 不判断"这个 hook 该不该存在"(这是 WP-level 决策,已冻结)

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.