Skip to content
Back to skills

Harness Guide

ASecurity

--- description: Triggered when the user says "recommend skill", "which skill", "harness guide", "skill recommendation", "what skill should I use", or "suggest a skill". Matches the best Skill for the user's scenario, shows installation status and invocation method. ---

  • 265 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added May 26, 2026
developmentgosqldockerterraformdebuggingcode-reviewgitfrontendsecurity

Security analysis

A100/100

Scanned May 27, 2026

npx -y skills add xwtro0tk1t-cloud/harness --skill harness-guide --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Harness Guide?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Harness Guide
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/xwtro0tk1t-cloud-harness-guide/badge)](https://www.skillsdirectory.com/skills/xwtro0tk1t-cloud-harness-guide)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# Harness Guide — Skill Recommendation

---
description: Triggered when the user says "recommend skill", "which skill", "harness guide", "skill recommendation", "what skill should I use", or "suggest a skill". Matches the best Skill for the user's scenario, shows installation status and invocation method.
---

## Behavior

1. Read `references/skill-guide.md` for the scenario → Skill recommendation matrix
2. Scan `~/.claude/skills/` for installed Skill list
3. If user describes a specific scenario → precise match recommendation
4. If no scenario described → display full recommendation matrix + decision tree

---

## Matching Logic

### Scenario Keywords → Skill Mapping

```
security audit / code audit / vulnerability scan
  → Check if security-review-skill-for-<project> exists
    → Yes → "Use your project-specific audit Skill directly"
    → No → "Recommend generating one with security-review-skill-creator first"

Docker / container / Dockerfile
  → security-review-skill-for-docker

Terraform / IaC / infrastructure as code
  → security-review-skill-for-terraform

SCA / vulnerability denoising / dependency vulnerabilities / CVE
  → sca-ai-denoise

supply chain / dependency poisoning / typosquatting
  → supply-chain-audit

Skill audit / third-party Skill / Skill security
  → skills-audit

web vulnerability / pentest / XSS / SQLi
  → web-vuln-analyzer (note: requires Docker configuration)

Android / APK / reverse engineering / frida
  → android-vuln-analyzer (note: requires toolchain)

new feature / feature development
  → superpowers (brainstorming → TDD)

bug / debug / debugging
  → superpowers (systematic-debugging)

code review
  → superpowers (requesting-code-review)

plan / task breakdown / planning
  → planning-with-files

create Skill / codify workflow
  → skill-creator

capture experience / lessons learned / knowledge extraction
  → claudeception

frontend / UI / component
  → frontend-design

design / poster / chart
  → canvas-design
```

### Output Format

```
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🧭 Skill Recommendation
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Scenario: "your described scenario"

Recommended Skill:
  ✅ skill-name — description
     Invoke: "trigger keyword or command"

  Alternatives:
  ✅ alt-skill — description

Status legend:
  ✅ = Installed  ❌ = Not installed  ⚠️ = Needs configuration
```

If the recommended Skill is not installed:

```
❌ skill-name is not installed

Installation:
  Option A (Bundled): ln -sf ~/.claude/skills/harness-en/bundled-skills/skill-name ~/.claude/skills/skill-name
  Option B (Git):     cd ~/.claude/skills/ && git clone <url> skill-name
```

---

## No Scenario: Display Full Guide

Read `references/skill-guide.md` for the 4 categories + decision tree, combined with installation status.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.