Skill UI

Performs a pure, read-only static security scan of a harness's declared MCP surfaces. It analyzes policy, permission, and dependency issues by reading manifest files (e.g., .mcp/servers.json and .harness/claims.json) without executing any underlying tools. Designed for integration into CI/CD pipelines to enforce security policies and ensure compliance.

This skill generates an enterprise-grade threat model report using the `harness threat-model` command. It categorizes threats across the MCP surface, providing a detailed report including the overall worst severity (clean, low, medium, high) and specific findings. Ideal for pre-launch security reviews and periodic audits when sharing findings with an InfoSec team.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

This skill analyzes existing legacy codebases to detect implicit coding conventions across four meta-architectural dimensions (File Anatomy, State & Control Flow, Infrastructure, Error Handling). It resolves conflicts one by one with the user, generating a structured rules file (.ai-style-rules.md) and optionally installing persistent hooks to prevent AI-generated code style drift in future development.

This skill generates a structured, non-advisory worksheet for planning trade ideas, basket adjustments, or comparing prediction markets. It helps users methodically review venues, underliers, constraints, and manual execution steps without placing any trades or providing financial advice. Ideal for the research phase of quantitative finance workflows.

This comprehensive skill provides deep integration with Jira, enabling users to manage the entire issue lifecycle. Features include retrieving ticket details, extracting testable requirements and acceptance criteria, updating issue status (transitions), adding comments, and linking code artifacts (PR/MR). Supports both recommended MCP server approach and direct REST API calls for robust development workflow automation.

This comprehensive guide covers advanced Kotlin testing patterns using industry-standard tools like Kotest and MockK. It details the entire TDD workflow (Red-Green-Refactor), property-based testing, coroutines testing, and code coverage configuration with Kover. Ideal for developers looking to write robust, maintainable, and scalable Kotlin codebases.

A comprehensive guide to implementing Test-Driven Development (TDD) in Laravel. This resource covers best practices for Unit, Feature, and Integration testing, guiding developers on using PHPUnit and Pest. It details strategies for managing database states (e.g., RefreshDatabase) and effectively mocking external dependencies for robust application development.

This skill guides the design and rigorous review of goal-oriented agent feedback loops. It helps ensure that complex autonomous multi-step agents are robust, preventing failures such as infinite looping, goal-gaming, or running to completion with incorrect assumptions. It covers defining machine-decidable goals, setting boundaries, and selecting the correct loop type (servo, regulator).

A comprehensive guide covering best practices for building and debugging Nuxt 4 applications. It details patterns for ensuring hydration safety, optimizing data fetching with `useFetch` and `useAsyncData`, managing complex routing rules, and implementing lazy loading for superior performance across SSR and client-side environments.

This skill orchestrates complex, behavior-preserving code refactoring. It is designed to improve code structure—such as extracting modules, eliminating duplication, or reducing nesting—without changing the core functionality. The process follows a rigorous, multi-phase gate system, ensuring existing tests remain green throughout the entire development lifecycle, culminating in a behavior-neutral commit.