Smithers Harness Detect

Name: Smithers Harness Detect
Author: smithersai

ASecurity

Change local coding-harness discovery, account status, model flag detection, or version probes.

429 stars
0 votes
0 copies
0 views
Added September 26, 2026

ai-agents

Security analysis

A100/100

Scanned October 3, 2026

npx -y skills add smithersai/smithers --skill smithers-harness-detect --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Smithers Harness Detect?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Smithers Harness Detect

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/smithersai-smithers-harness-detect/badge)](https://www.skillsdirectory.com/skills/smithersai-smithers-harness-detect)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: smithers-harness-detect
description: Change local coding-harness discovery, account status, model flag detection, or version probes.
---

# Harness detection

Read [the harness-detect README](../../../packages/smithers/agent/harness-detect/README.md) and the shared harness contracts in `packages/rpc/src/LocalApp.ts` and launch metadata in `packages/rpc/src/AgentRoles.ts` before changing a detector. The package is pure over an injected `HarnessHost`; filesystem and process probes belong in the adapter. Keep binary search, account status, and model flags grounded in the installed harness's actual help and observed files.

A version probe runs only `--version` with `probeEnv`'s `PROBE_ENV_KEYS` allowlist. Do not pass session or vendor credentials to the child; the live adapter also owns sandboxing and timeout. The Codex JWT email claim is decoded without verification and must not be returned as an authenticated identity. Test the injected host with fixture paths and a probe environment that excludes unrelated tokens.