Skill UI

A structured method for transforming experience (especially failures and complex tasks) into actionable, reusable knowledge. Instead of simple diary entries, this skill guides the user to extract root causes, identify underlying patterns, and articulate what they must do differently next time, thereby accelerating professional learning and debugging efficiency.

This tool simplifies the process of detecting structural drift by combining audit listing, fresh auditing, and trend diffing into a single command. It finds the most recent audit record, runs a current audit against the repository, and compares the two using structural similarity metrics. It alerts when the structural distance falls below a specified threshold, helping maintain code consistency over time.

A comprehensive 7-section report providing a deep assessment of a repository's health and readiness level. It calculates key metrics including risk score, agent topology recommendations, MCP surface area, test confidence, and publish readiness. This tool is vital for pre-mint reviews, detecting architectural drift, and enforcing strict CI/CD quality gates.

This tool provides deep inspection and auditing capabilities for GEPA (genetic-evolution prompt-adaptation) genomes by utilizing the internal `@metaharness/darwin/gepa` library. It is crucial for advanced AI development pipelines, allowing users to validate the structural integrity of genomes, render the full system prompt derived from a genome, or classify specific failure modes found in an execution transcript. Ideal for CI/CD gating and debugging complex LLM applications.

This tool executes a GEPA learning cycle, automating the evolution and optimization of policy prompts against a scored task corpus. Instead of relying on manual prompt iteration, it measures performance improvements, identifying the best working 'harness genome.' It is ideal for measuring sustainable improvements in task performance and supports a free, cost-estimating dry-run mode before committing to actual model calls.

Performs a pure, read-only static security scan of a harness's declared MCP surfaces. It analyzes policy, permission, and dependency issues by reading manifest files (e.g., .mcp/servers.json and .harness/claims.json) without executing any underlying tools. Designed for integration into CI/CD pipelines to enforce security policies and ensure compliance.

This skill executes the metaharness score to provide a comprehensive, multi-dimensional readiness scorecard for a codebase. It assesses critical dimensions like compilation confidence, task coverage, tool safety, and memory usefulness. Use it to evaluate if a repository is prepared for harness adoption before initiating development tools or framework setup.

This tool executes the advanced `metaharness/darwin` security benchmark (ADR-155). It rigorously evaluates the security detection capabilities of AI systems against a controlled ground-truth corpus, providing critical metrics like TPR, FPR, and patch-pass rates. It compares the champion model against multiple baselines, offering empirical data crucial for iterative security improvement and drift detection.

This skill generates an enterprise-grade threat model report using the `harness threat-model` command. It categorizes threats across the MCP surface, providing a detailed report including the overall worst severity (clean, low, medium, high) and specific findings. Ideal for pre-launch security reviews and periodic audits when sharing findings with an InfoSec team.

This library provides comprehensive patterns for building robust Clinical Decision Support Systems (CDSS) integrated into Electronic Medical Records (EMR). It ensures patient safety by implementing critical checks such as drug interaction screening, weight/age/renal-adjusted dose validation, and standardized clinical scoring (e.g., NEWS2). The engine uses pure functions, guaranteeing high testability and reliability for critical medical insights.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.