Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add harness/harness-skills --skill manage-cdegit clone --depth 1 https://github.com/harness/harness-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/harness/harness-skills/manage-cde)<a href="https://agentmods.dev/skills/harness/harness-skills/manage-cde"><img src="https://agentmods.dev/badge/skills/harness/harness-skills/manage-cde/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/harness/harness-skills/manage-cde"><img src="https://agentmods.dev/badge/skills/harness/harness-skills/manage-cde.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00111 | $0.01058 |
| Opus 5 | $0.00056 | $0.00529 |
| Sonnet 5 | $0.00022 | $0.00212 |
| Haiku 4.5 | $0.00011 | $0.00106 |
Grade A, and why
manage-cde scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- manage-cde — 100% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 134 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Manage CDE
Configure on-demand Cloud Development Environments with workspace templates, auto-hibernation, and cost controls in Harness.
Instructions
Step 1: Establish Scope
Confirm the user's org, project, team, and technology stack.
Call MCP tool: harness_list
Parameters:
resource_type: "project"
org_id: "<organization>"
Step 2: Identify the CDE Task
Determine which workflow the user needs:
- On-Demand Environment Setup -- Environment templates with resource allocation and lifecycle
- Workspace Standardization -- Pre-configured templates per team/stack with consistent tooling
Step 3: Configure On-Demand Environments
Gather from the user:
- Technology stack and runtime version
- Cloud provider (AWS, GCP, Azure)
- IDE preference (VS Code browser, VS Code SSH, JetBrains Gateway)
- Git provider for auto-clone on start
Design the environment template:
Resource allocation:
- Default size (e.g., 4 vCPU, 8GB RAM) with upgrade options
- Persistent storage for workspace files
- Ephemeral storage that clears on stop
Lifecycle configuration:
- Provisioning trigger: developer request, PR creation, or branch push
- Start time target (under 30 seconds recommended)
- Auto-stop after idle timeout (default 30 minutes)
- Persistent mode option for long-running work
Integrations:
- Secret injection from Harness Secrets, Vault, or cloud secret managers
- Supporting services (databases, caches, message queues) via Docker Compose or Kubernetes
- Custom access URL pattern (e.g., {user}-{env}.dev.company.com)
Cost controls:
- Daily cost cap per environment
- Team-level monthly budget
- Auto-hibernation for idle environments
Step 4: Create Workspace Templates
When standardizing across teams, create templates per role/stack:
Backend Service Developer:
- Runtime, build tools, testing frameworks
- Database clients, API testing tools
- Pre-configured debugger and linter
Frontend Developer:
- Node.js runtime, package manager
- Browser dev tools, component library
- Hot-reload and preview server
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 134 lines · 111 tokens per session scan A d788b35be072
manage-cde is a skill published in the GitHub repository harness/harness-skills (105 stars, last pushed yesterday), licensed Apache-2.0. It adds 111 tokens to every session and 1,058 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cost-optimization
Optimize cloud costs across AWS, Azure, GCP, and OCI through resource rightsizing, tagging strategies, reserved instances, and spending analysis. Use when reducing cloud expenses, analyzing infrastructure costs, or implementing cost governance policies.
istio-traffic-management
Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments. Use when implementing service mesh traffic policies, progressive delivery, or resilience patterns.
linkerd-patterns
Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.
azure-eventhub-dotnet
Azure Event Hubs SDK for .NET. Use for high-throughput event streaming: sending events (EventHubProducerClient, EventHubBufferedProducerClient), receiving events (EventProcessorClient with checkpointing), partition management, and real-time data ingestion. Triggers: "Event Hubs", "event streaming"…
azure-mgmt-fabric-dotnet
Azure Resource Manager SDK for Fabric in .NET. Use for MANAGEMENT PLANE operations: provisioning, scaling, suspending/resuming Microsoft Fabric capacities, checking name availability, and listing SKUs via Azure Resource Manager. Triggers: "Fabric capacity", "create capacity", "suspend capacity", "resume capacity"…
azure-resource-manager-durabletask-dotnet
Azure Resource Manager SDK for Durable Task Scheduler in .NET. Use for MANAGEMENT PLANE operations: creating/managing Durable Task Schedulers, Task Hubs, and retention policies via Azure Resource Manager. Triggers: "Durable Task Scheduler", "create scheduler", "task hub", "DurableTaskSchedulerResource", "provision…