Skill UI

Performs a pure, read-only static security scan of a harness's declared MCP surfaces. It analyzes policy, permission, and dependency issues by reading manifest files (e.g., .mcp/servers.json and .harness/claims.json) without executing any underlying tools. Designed for integration into CI/CD pipelines to enforce security policies and ensure compliance.

A comprehensive audit worker that integrates Open Infrastructure Architecture (OIA) manifest analysis, threat modeling, and MCP security scanning. It computes a composite worst-case severity score and persists time-stamped audit records in a memory namespace. Primarily designed for scheduled CI/CD pipelines to detect architectural drift and security regressions over time.

This skill generates an enterprise-grade threat model report using the `harness threat-model` command. It categorizes threats across the MCP surface, providing a detailed report including the overall worst severity (clean, low, medium, high) and specific findings. Ideal for pre-launch security reviews and periodic audits when sharing findings with an InfoSec team.

This library provides comprehensive patterns for building robust Clinical Decision Support Systems (CDSS) integrated into Electronic Medical Records (EMR). It ensures patient safety by implementing critical checks such as drug interaction screening, weight/age/renal-adjusted dose validation, and standardized clinical scoring (e.g., NEWS2). The engine uses pure functions, guaranteeing high testability and reliability for critical medical insights.

This skill guides the process of converting complex, repetitive, and often private operational workflows originating in the Hermes environment into safe, reusable, and public skills for the ECC workflow layer. It focuses heavily on data sanitization, requiring users to strip out all sensitive information such as absolute paths, private credentials, personal identifiers, and proprietary data before publication. Use this when an internal 'operator' routine needs to become a standardized, shareable business asset.

Hookify rules enable developers to define custom, event-driven workflows using Markdown files with YAML frontmatter. These rules monitor specific operational events (such as bash commands, file edits, or user prompts) and can trigger warnings or block operations when predefined regex patterns are matched. They are essential for enforcing coding standards, preventing dangerous operations, and guiding development adherence in complex software environments.

This skill analyzes existing legacy codebases to detect implicit coding conventions across four meta-architectural dimensions (File Anatomy, State & Control Flow, Infrastructure, Error Handling). It resolves conflicts one by one with the user, generating a structured rules file (.ai-style-rules.md) and optionally installing persistent hooks to prevent AI-generated code style drift in future development.

This utility initializes a brand-new Ruflo project environment. It sets up all necessary underlying components, including MCP tools, hooks, and agent configurations. It is essential for developers starting a project in a fresh repository, allowing selection between standard, minimal, or full presets to bootstrap the entire system.

This skill helps transform vague product or engineering ideas into structured, verifiable acceptance criteria (AC). It is crucial for high-impact changes involving security, data migration, or external APIs. By inspecting existing context and asking minimal, targeted questions, it produces clear, observable criteria, significantly de-risking the development process and ensuring handoff readiness.

Generates professional PNG icon image sets for the Xcode Asset Catalog, supporting both massive open-source collections via Iconify API and native Apple symbols via SF Symbols. Use this tool to streamline the creation, search, and replacement of app icons, ensuring consistency in style, size, and color across your iOS project.

A comprehensive tool for managing and orchestrating firmware rollouts across large device fleets. It supports advanced deployment strategies, including canary releases and anomaly-gated advancements. Users can deploy, advance, roll back, check status, and list all ongoing rollouts through defined stages (pending, canary, rolling, complete).

This tool provides comprehensive command-line functionality to manage Cognitum Seed device fleets. It allows users to programmatically perform essential operations such as listing, creating, adding, removing, and deleting entire groups of IoT devices, ensuring systematic lifecycle management and policy enforcement across large-scale deployments.