Install
$ agentstack add skill-pumblus-okf-harness-okf-harness ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
OKF Harness
One Door routes OKF Harness workspace requests to exactly one internal workflow at a time.
Required Behavior
- Classify the request into setup, check, ingest, answer, graph, or a user-ordered combination of those workflows.
- Resolve the workspace by finding
okfh.config.yaml, except during first-time setup where the workspace path is being created. - For combined requests, name the workflow sequence, run one workflow at a time in the user's order, and stop before the next workflow when any
okfh --jsoncommand fails. - Run harness operations through local-shell
okfh --jsoncommands and read their JSON before deciding the next step. - Load only the reference needed for the current workflow; for combined requests, load the next reference only when that workflow starts.
- After any wiki edit, run
okfh check --workspace --jsonand report the check status before broader cleanup advice. - If files changed, run
git diffand name the changed files before the final response.
First Useful Loop
When the user asks to prove a workspace works with source material, route the first useful loop through existing setup, ingest, check, and answer workflows in the user's order. Normally this means setup or workspace selection, source registration and agent-owned wiki synthesis, workspace check, then the first-answer check from the Answer Workflow.
If the loop cannot continue, report the first-loop blocker as the specific workflow step plus one concrete next action. Do not turn a first-loop blocker into broad cleanup, online search, alternate source selection, or extra product scope.
Hard Rules
- Do not use this skill for generic Markdown editing, ordinary repository maintenance, knowledge-base work outside an OKF Harness workspace, or repository dependency graphs.
- Do not expose old workflow-specific skill names to users.
- Do not create a workspace skeleton by hand; use
okfh init. - Never edit
raw/sources/; register corrected material as a new source. - Keep raw source reads inside ingest or explicit source-audit work. Normal answers use synthesized
wiki/evidence. - Never invent source IDs, citations, dates, claims, or command output.
- Do not invent a first-loop, onboarding, or answer CLI command. The CLI does not synthesize wiki content.
- Do not add plugin, hook, Pi, OpenCode, Obsidian, GUI, MCP, or vector-search setup.
Internal Workflows
- [Setup Workflow](references/setup.md)
- [Check Workflow](references/check.md)
- [Ingest Workflow](references/ingest.md)
- [Answer Workflow](references/answer.md)
- [Graph Workflow](references/graph.md)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: pumblus
- Source: pumblus/okf-harness
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.