AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Init Verification

skill-redtropig-harness-anchor-init-verification · by Redtropig

Use at start of work, after env changes (deps/branch/OS), or when something stops working. Runs init.sh health check; treats failures as blocking.

No reviews yet
0 installs
14 views
0.0% view→install

Install

$ agentstack add skill-redtropig-harness-anchor-init-verification

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-redtropig-harness-anchor-init-verification)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
10d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Init Verification? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Init Verification

Before writing any code, prove the environment is healthy. Anthropic's Nov 2025 harness guidance: the initializer agent runs init.sh, then the coding agent picks up — health is verified BEFORE work begins.

When to invoke

  • First action of every fresh session
  • After git checkout to a different branch
  • After dependency changes (package.json / Cargo.toml / etc. modified)
  • After OS / toolchain updates
  • When a previously-working command suddenly fails
  • Before claiming a feature done (re-verify in case of drift)

Procedure

  1. Locate init.sh in project root.
  • Missing → tell the user to run /anchor to scaffold one. Do not proceed.
  1. Run it.

``bash bash init.sh ``

Capture stdout+stderr.

  1. Interpret exit code.

| Exit | Meaning | Action | |---|---|---| | 0 | All checks passed | Proceed with work | | 1 | One or more checks failed | Stop. Fix the reported issues before doing anything else. | | other | Unexpected | Read output; either fix init.sh itself or report to user |

  1. On failure: list the specific missing files/tools, propose fixes one at a time:
  • Missing tool (e.g. cmake not found) → suggest install command appropriate to platform (brew install cmake on macOS)
  • Missing state file (e.g. feature_list.json missing) → suggest /anchor
  • Missing build artifact (e.g. compile_commands.json missing) → suggest correct configure command
  1. After fix: re-run init.sh. Repeat until exit 0. Then continue work.
  1. Re-check inherited NEGATIVE capability conclusions.

A line in AGENTS.md shaped like searched , not found (as of ) records what a past session observed. It is not a current fact. Re-check each one. This step, by construction, only ever re-checks conclusions already recorded as absent, so it always takes the discovery chain's NOT_FOUND path — the slower, full-ladder search, not the fast PATH hit — and that path measures ~1.6s for two tools (51-entry PATH):

``bash bash ${CLAUDE_PLUGIN_ROOT}/scripts/cpp-tool-discovery.sh ``

For non-C/C++ ecosystems, the equivalent is command -v plus that platform's known install locations — command -v alone is the check that produced the wrong conclusion in the first place.

  • Tool now present → report it to the user and propose updating that line.

Do not silently rewrite someone's operating manual.

  • Still absent → refresh the date, or leave it; either is fine. What is not

fine is citing the old conclusion as if it were fresh evidence.

Only negative conclusions get re-checked, and that asymmetry is deliberate:

| Conclusion | How it fails once stale | Needs a proactive re-check? | |---|---|---| | Negative ("clang-tidy not found") | Silently. The tool gets installed, the note never updates, and the capability is skipped for the rest of the project's life. This is the observed failure mode. | Yes | | Positive ("clang-tidy at /usr/bin/clang-tidy") | Loudly. The next invocation is command not found. | No |

Residual blind spot: this step only reaches lines written in the mandated form above. A capability conclusion phrased freehand — or written before v0.17.0 — is invisible to it. A clean re-check means "the dated conclusions are current", never "the manual contains nothing stale".

What init.sh should check (project-specific)

The template provides scaffolding for:

  • harness state files (AGENTS.md, feature_list.json, progress.md, session-handoff.md, PROJECT-TOC.md)
  • presence of git

The user edits init.sh to add project-specific checks:

  • Build commands (cmake -S . -B .build / npm install / cargo check)
  • Dependency presence (node --version, python --version)
  • Service availability (db ping, external API reachability) — only if needed at agent-start

Keep init.sh fast — under 30 seconds. Heavyweight checks (full test suite) belong in /verify, not init.

Calibrated reporting

When init.sh reports OK, the agent's claim is "environment looks healthy as of ". Don't oversell — env can drift mid-session if commands modify it.

When it fails, list the specific failed step, not "init failed" alone.

Anti-patterns

  • Skipping init.sh because "I think the env is fine" → you don't know until you check
  • Editing init.sh to make a failing check pass without fixing the underlying issue → masking
  • Running init.sh once at session start, then assuming the env stays healthy 4 hours later — re-run after meaningful environment changes

When NOT to run

  • Inside a subagent that was already given verified-healthy context
  • For trivial single-file edits where build/test aren't needed (rare; usually init still cheap enough to run)

Worktree setup (superpowers:using-git-worktrees)

When superpowers:using-git-worktrees sets up an isolated workspace, its Step 2 (Project Setup) is init.sh — run it as the baseline instead of re-deriving ad-hoc npm install / cargo build; its Step 3 (Verify Clean Baseline) is the project's test command / /verify (the heavier pass init.sh deliberately defers). The git-tracked state trio travels with the branch checkout, so a worktree is already anchored — don't re-run /anchor. But .harness-anchor/ is gitignored, so a fresh worktree starts with no prior verify/coverage/drift evidence: that is expected, not un-anchored — it is recreated on demand when a sensor first writes to it.

Looking up toolchain errors

When init.sh fails with a cryptic toolchain message (e.g., CMake "could not find compiler", npm ENOENT, cargo "linker not found") — invoke the docs-lookup skill. Context7 is best for stable tool behavior; WebSearch surfaces recent platform-specific changes; calibrated uncertainty when neither helps.

Typical entry query: paste the exact error string in quotes + the tool name.

Related

  • /anchor — scaffolds the initial init.sh
  • /verify — heavier-weight full verification (different scope)
  • feature-state-keeperinit.sh failure is captured in session-handoff.md "Risks"

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.