skill-security-review

claude-harnesses

claude-harnesses is a curated collection of hooks, skills, MCP recipes, slash commands, and subagents for long-running, safe, high-quality Claude Code-driven software development.

Claude Code should not be expected to succeed by intelligence alone. This repository provides the durable scaffolding around it: deterministic guardrails, resumable task memory, and reusable workflows for the work that comes up over and over (review, TDD, CI fix, security review, refactor, release check).

The user guide is published at s-hiraoku.github.io/claude-harnesses.

Four ways to install

Pick whichever fits how you usually adopt tooling.

1) Anthropic plugin marketplace (recommended)

The marketplace offers three granularities. Pick exactly one tier per concern — full already contains every pack and skill, so don't combine it with the others.

From inside a Claude Code session:

/plugin marketplace add s-hiraoku/claude-harnesses

# Everything at once (all skills, commands, agents, and hooks):
/plugin install full@claude-harnesses

# A thematic pack (skills + hooks + agents for one concern):
/plugin install pr-guardian-pack@claude-harnesses
/plugin install safety-pack@claude-harnesses

# A single skill (plus its slash command and referenced subagents):
/plugin install skill-tdd@claude-harnesses
/plugin install skill-review@claude-harnesses

The same flow works non-interactively from the shell:

claude plugin marketplace add s-hiraoku/claude-harnesses
claude plugin install full@claude-harnesses

Packs: adviser-pack, safety-pack, verification-pack, review-pack, tdd-pack, pr-guardian-pack, long-running-pack, mcp-pack, product-pack, research-pack, meta-pack, teaching-pack. Every skill is also published individually as skill-<name> (e.g. skill-frontend-design, skill-security-review); browse them with /plugin.

2) APM (Agent Package Manager)

APM is a cross-agent dependency manager that works with Claude Code, Cursor, Copilot, and others.

apm install s-hiraoku/claude-harnesses/full
# or pin to a tag
apm install s-hiraoku/claude-harnesses/tdd-pack#v0.1.0

Or declare the dependencies in apm.yml and run apm install to reproduce the same setup across machines.

3) gh skill install

gh skill install s-hiraoku/claude-harnesses tdd --scope project
gh skill install s-hiraoku/claude-harnesses review --scope user

4) npx skills add

npx skills add s-hiraoku/claude-harnesses --skill review
npx skills add s-hiraoku/claude-harnesses --all

For Vercel or Next.js frontend projects, pair this harness with Vercel's official frontend skills:

npx skills add vercel-labs/agent-skills --global --skill vercel-react-best-practices vercel-composition-patterns vercel-react-view-transitions web-design-guidelines
npx skills add vercel-labs/next-skills --global --skill next-best-practices

For vendoring harness files directly into your repo without a plugin runtime, see scripts/install.sh.

See docs/installation.md for the full comparison.

What it ships