harness-skill-creator
Use when bootstrapping or tightening the smallest harness-oriented skill from an existing repository, workflow, evaluation corpus, or harness-analys…
它会碰到什么
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
Harness Skill Creator
Create the smallest skill that makes another agent repeat one harness job with
evidence, validation, and clear ownership.
Workflow
- Resolve source, target, and host: canonical
skills/<name>/,.agents/skills/wrapper, or both. - Inspect the source chain before designing: entry
SKILL.md, first-hop
references, scripts, validators, templates, specs, tests, plugin manifests,
and any real smoke evidence.
- Load
references/bootstrap-patterns.mdafter the first inventory. Use it to
extract patterns, not product-specific rules.
- Draft the minimum viable skill map:
- skill name and trigger sentence
- one job the skill owns
- files to create under
skills/<skill-name>/, usuallySKILL.mdplus one reference - evidence boundary and validation commands
- forward-test prompt and pass/fail gates
- Initialize new canonical skills with the system
skill-creatorhelper when
available. Add scripts/ only for stable repeated automation; keep ad-hoc
evaluation prompts out of runtime scripts.
- Write the
SKILL.mdas a router. Put trigger conditions in frontmatter
description, keep the body short, and route detailed rules to first-hop
references.
- Validate locally, then forward-test. Treat qodercli output as model evidence;
local validators and file inspection decide pass/fail.
Design Gates
- Prefer one skill over a stage tree until the target process proves multiple
reusable stages.
- Copy ownership shape, not product names, branch policy, private commands, or
source-specific team routing.
- Keep
.agents/skills/as a wrapper or mirror when the workflow is shared by
the plugin; canonical judgment belongs under root skills/.
- Do not add install, network, server, migration, or dependency-changing
commands unless the user requested them and source evidence supports them.
- Prefer portable Node/Python validators or target-owned commands. Do not default generated validation gates to Unix-only
grep/findchecks. - In attachment-only or no-tools forward-tests, never emit tool-call markup, shell probes, or inspection plans; return the skill map with
status: "insufficient-evidence"when needed. - Forward-test
filesis a string array ofskills/<skill-name>/...paths, not objects. - If the generated skill cannot pass
quick_validate.py <skill-dir>, do not
describe it as usable.
- After any forward-test, verify git status or file inventory for every repo the
model was allowed to read or write.
Validation
Run the narrowest useful gates for the created skill:
python3 <skill-creator-root>/scripts/quick_validate.py <skill-dir>
qodercli --cwd <neutral-dir> --plugin-dir <harness-root> -p "<forward-test prompt>"
qodercli plugin validate <harness-root>
Reject missing frontmatter, stale placeholders, broken links, unsupported
commands, source-only assumptions, pseudo tool calls, or broad reports.
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。