Three defense-in-depth hooks: credential value scrub (PostToolUse), admission keyword reminder (UserPromptSubmit), bash command guard (PreToolUse). Built after repeated credential leak incidents — structural fix when behavioral rules in CLAUDE.md keep failing.
Plugin harness-core from marketplace claude-harness in hrmtz/claude-harness. Commands read from the repo's manifest — 1 month ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
discord-notifyPush a progress notification to the user's Discord via the shared `discord-bot` CLI. Use when a milestone lands (phase complete, build green, cutover done), an unexpected incident is detected, or an ETA moves by hours — especially while the user is away from the pane. Also use when asked to "notify"
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/stall_au
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || { python3 "${CLAUDE_PLUGIN_ROOT}/hooks/sr_depth
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || { python3 "${CLAUDE_PLUGIN_ROOT}/hooks/fabricat
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec python3 "${CLAUDE_PLUGIN_ROOT}/hooks/conte
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || { python3 "${CLAUDE_PLUGIN_ROOT}/hooks/sr_depth
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || { python3 "${CLAUDE_PLUGIN_ROOT}/hooks/fabricat
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/bash_com
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec python3 "${CLAUDE_PLUGIN_ROOT}/hooks/subar
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/branch_p
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/long_tas
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/fat_outp
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/pg_rotat
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/sanada_a
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/credenti
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/credenti
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/check_zs
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/check_ea
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/check_ps
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/negative
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || { python3 "${CLAUDE_PLUGIN_ROOT}/hooks/fabricat
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/credenti
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/credenti
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec python3 "${CLAUDE_PLUGIN_ROOT}/hooks/conte
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || { python3 "${CLAUDE_PLUGIN_ROOT}/hooks/fabricat
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/admissio
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec python3 "${CLAUDE_PLUGIN_ROOT}/hooks/secre
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/code_rev
"${CLAUDE_PLUGIN_ROOT}/bin/install-cache-safe-entrypoints"
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/temporal
test -x "${HOME}/.local/bin/harness-hook" && grep -Fqx '# HARNESS_HOOK_DISPATCHER_ID=claude-harness/v1' "${HOME}/.local/bin/harness-hook" 2>/dev/null || exec bash "${CLAUDE_PLUGIN_ROOT}/hooks/tmux_hyp
Three-perspective preflight review skill (MELCHIOR/BALTHASAR/CASPAR personas, parallel Task spawn) for high-stakes changes — front-loads post-hoc optimization insights before walltime / cost / destructive state is committed. Triggers on walltime >= 2h, >= 100M row DML, non-reversible cutover, new pipeline layer, >= $10 spend, or long-poll scripts.
5 skills
Behavioral craft skills distilled from obra/superpowers (MIT): skill-tdd (author skills via RED-GREEN-REFACTOR pressure testing, with a structural-first entry gate), atomized-briefing (context-free 2-5 min task plans for formation workers / subagent dispatch), root-cause-debugging (Iron Law + 3-failed-fixes escalation to dual-magi-review). Superpowers teaches, harness enforces — this plugin is the explicitly-behavioral annex wired into the enforcing half.
4 skills
Peer-pane Claude Code worker orchestration via tmux + jsonl mailbox. Bundles Formation worker spawning, session-scoped routing, and a receipt-gated babysit-pr skill for bounded CI monitoring and reply-only review follow-up. Hooks suggest Formation and mint local ownership receipts only for active Formation sessions.
2 skills · 1 agent · hooks
Bounded Magi pre-flight, Dual-Magi design, and Ultramagi implementation review profiles for Codex.
3 skills · hooks
Operational safety rails for long-running operations. Pre-flight algorithm fitness CLI (working set vs RAM ceiling, with concrete alternatives), in-flight heartbeat helper + cron watcher (stale + ETA overrun detection), Discord + gh issue auto-emit. Human-in-loop only — no auto-kill. Built after a 23h sunk-cost incident where philosophy-level early-bleeding-detection lived only in CLAUDE.md memory, not in structural rails.
1 skill · hooks
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.