Home / hashgraph-online / awesome-codex-plugins · GitHub

harness-audit SKILL.md skillA

harness-audit from hashgraph-online/awesome-codex-plugins is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add hashgraph-online/awesome-codex-plugins/harness-audit@git:20260512.6523792

Pins git:20260512.6523792 in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: hashgraph-online/awesome-codex-plugins
Path: plugins/Colin4k1024/tsp/skills/harness-audit/SKILL.md
Versions recorded: 1
Latest version: git:20260512.6523792, committed May 12, 2026
Size: 4,761 bytes
Repository stars: 1,537
License: Apache-2.0

Harness 能力面审计（7 维度评分 + 改进建议）。对角色覆盖、技能完整性、Hook 有效性、规则执行、命令覆盖、文档质量、集成深度进行全面评估，输出 Overall Score、Dimension Scores 和 Top Actions。适用于平台健康检查、季度能力审查、新增能力后的回归验证。关键词：harness-audit、平台审计、技能完整性、Agent 覆盖、命令覆盖、文档质量。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Harness 能力面审计

对当前平台配置进行 **7 维度评分**，定位能力短板并给出优先改进建议。

---

## 触发方式

```
/harness-audit
```

或由 `harness-optimizer` specialist 直接调用。

---

## 7 个评估维度

### 1. Agent Coverage（代理覆盖）

检查所有角色是否有对应的 `agents/roles/*.md` 生成文件，specialist agents 是否与 `commands/` 命令一一对应。

**评分标准**：
- 90–100：所有角色 + 全部 specialist 覆盖完整
- 70–89：≥ 2 个角色或 specialist 缺失
- < 70：核心角色缺失 agent 文件

### 2. Skill Completeness（技能完整性）

检查 `skills/`、`skills/`、`skills/` 中所有技能是否有有效 `SKILL.md`，role.yaml 中引用的技能是否实际存在。

**评分标准**：
- 90–100：无悬空引用，所有 SKILL.md 齐备
- 70–89：1–3 处悬空引用
- < 70：多处悬空引用或 SKILL.md 缺失

### 3. Hook Effectiveness（Hook 有效性）

检查 `hooks/hooks.json` 配置是否启用关键 hook，`session_start.py`/`session_end.py` 是否能实际运行。

**评分标准**：
- 90–100：hooks 配置完整，smoke 验证通过
- 70–89：hooks 存在但未启用
- < 70：hooks 缺失或运行报错

### 4. Rule Enforcement（规则执行）

检查 `rules/` 中所有规则文件是否被 CLAUDE.md/AGENTS.md 或角色的 `governance_rules` 字段引用。

**评分标准**：
- 90–100：无孤立规则，所有规则有引用入口
- 70–89：≤ 3 个孤立规则
- < 70：> 3 个孤立规则或核心规则未引用

### 5. Command Coverage（命令覆盖）

检查 `commands/` 中每个命令是否在 CLAUDE.md/AGENTS.md 的命令面中列出，specialist 与命令是否匹配。

**评分标准**：
- 90–100：命令与 AGENTS.md 门面一致
- 70–89：1–2 个命令缺少文档入口
- < 70：> 2 个命令游离于门面之外

### 6. Documentation Quality（文档质量）
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add hashgraph-online/awesome-codex-plugins/harness-audit@sha256:a2b8fb0a1c7f9748

The line at the top of this page pins the label git:20260512.6523792, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_gt2v6h5gnncxjj3b.svg)](https://markdownregistry.com/a/art_gt2v6h5gnncxjj3b)

5 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on May 12, 2026.

version	committed	commit	size	audit
git:20260512.6523792 latest	2026-05-12	6523792	4,761 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (4761 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

hashgraph-online/awesome-codex-plugins · 1,537 stars · license Apache-2.0 · pushed 2026-11-08 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_gt2v6h5gnncxjj3b
GET https://markdownregistry.com/api/v1/resolve?ref=hashgraph-online/awesome-codex-plugins/harness-audit
GET https://markdownregistry.com/api/v1/blob/a2b8fb0a1c7f97487dc111166164904c191e3da39b87eea4ff19da817fa59d70

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hashgraph-online/awesome-codex-plugins

list-my-plugin SKILL.md skill

hashgraph-online/awesome-codex-plugins · .agents/skills/list-my-plugin/SKILL.md · Add a Codex plugin to the awesome-codex-plugins README as one correctly placed line, check it locally, and finish with…

git:20261105.cfef970 · audit A · 1,537 stars

AGENTS.md AGENTS.md file

hashgraph-online/awesome-codex-plugins · AGENTS.md

git:20261105.dcc7950 · audit A · 1,537 stars

ontoly-software-graph SKILL.md skill

hashgraph-online/awesome-codex-plugins · plugins/0xsarwagya/ontoly-codex-plugin/skills/ontoly-software-graph/SKILL.md · Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files…

git:20260714.2040a1b · audit A · 1,537 stars

agent-debug-fixer SKILL.md skill

hashgraph-online/awesome-codex-plugins · plugins/1139030773-cmd/agent-workflow-system/skills/agent-debug-fixer/SKILL.md · 中文调试修复技能。用于报错、测试失败、页面异常、功能不符合预期、需要定位根因并做最小修复时。触发语包括"进入调试模式""帮我修问题""报错了""测试失败""页面坏了""找根因"。