Stats
Actions
Available In
Tags
Help us improve
Share bugs, ideas, or general feedback.
Plugin
Harness Web
Curated web engineering pack with five sub-domains — api-service, design-system, distributed-backend, frontend-app, and fullstack-app — wiring domain skills, read-only architect/auditor agents, accessibility-first verification, and Core Web Vitals gates.
$
npx claudepluginhub camilool8/harness-engineering-templates --plugin harness-webPopularity
Stars
Med: 0·Avg: 274
Installs
Med: 0·Avg: 1
What's Inside
Slash Commands1
Agents21
accessibility-auditor
/accessibility-auditor
Audits rendered UI for WCAG 2.2 AA compliance using axe-core. Use after any UI change to catch accessibility regressions before they ship.
api-architect
/api-architect
Designs the OpenAPI schema, resource model, auth/z strategy, and error contract for an API service before any handler is written. Schema-first. Use before implementing any new endpoint, resource, or breaking change.
api-contract-reviewer
/api-contract-reviewer
Verifies that the API implementation matches the committed OpenAPI schema and that no breaking changes are introduced without a version bump. Read-only. Use after api-implementer completes work, before merging any handler change.
api-implementer
/api-implementer
Implements API handlers, middleware, and validation as specified in an api-architect plan. Bounded to the handler files named in the plan. Use only after an api-architect plan has been reviewed and the OpenAPI schema fragment committed.
api-security-auditor
/api-security-auditor
Audits every API endpoint for OWASP API Security Top 10 issues including broken auth, excessive data exposure, injection, and missing rate limiting. Read-only. Use after api-implementer completes work and before a feature is marked done.
Skills25
web-addon-astro
/addon-astro
Astro server-first conventions — zero client JS by default, island hydration directives, content collections, and static vs server rendering. Use when working in an Astro project, adding islands, or deciding hydration strategy for a content-heavy site.
web-addon-authjs
/addon-authjs
Auth.js v5 authentication conventions — encrypted sessions, env-var-only secrets, server vs client session access, edge middleware route protection, and provider credential inference. Use when adding or reviewing a login flow, OAuth, or session handling.
web-addon-drizzle
/addon-drizzle
Drizzle ORM conventions — schema as source of truth, the generate/migrate workflow, expand-contract migrations for safe production changes, no destructive DDL without a reviewed PR, and the fluent vs relational query API. Use when defining schema, writing migrations, or querying the database with Drizzle.
web-addon-nextjs
/addon-nextjs
Next.js App Router conventions — Server Components by default, leaf-node 'use client' boundaries, server-side data fetching with cache control, Server Actions for mutations, file-system routing, and the server/client import boundary. Use when building in the app/ directory or reviewing Next.js App Router code.
web-addon-playwright-e2e
/addon-playwright-e2e
Playwright E2E conventions — the required page-object model, asserting on the accessibility tree (toMatchAriaSnapshot) rather than pixels, and strict per-test isolation with storageState for auth. Use when writing or reviewing end-to-end tests against a running dev or staging server.
Stats
Version0.1.0
LanguageShell
Stars0
MaintenanceGood
LicenseMIT
Last Commit
Added
Dependencies
harness-base
Available In
Safety Signals
Caution
Modifies files
Hook triggers on file write and edit operations
External network access
Connects to servers outside your machine
Help us improve
Share bugs, ideas, or general feedback.
