Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add LuisFelipeMoro/Harness-devkit --skill taskgit clone --depth 1 https://github.com/LuisFelipeMoro/Harness-devkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/luisfelipemoro/harness-devkit/task)<a href="https://agentmods.dev/skills/luisfelipemoro/harness-devkit/task"><img src="https://agentmods.dev/badge/skills/luisfelipemoro/harness-devkit/task/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/luisfelipemoro/harness-devkit/task"><img src="https://agentmods.dev/badge/skills/luisfelipemoro/harness-devkit/task.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00087 | $0.01210 |
| Opus 5.5 | $0.00035 | $0.00484 |
| Sonnet 5.5 | $0.00017 | $0.00242 |
| Haiku 4.5 | $0.00009 | $0.00121 |
Grade A, and why
task scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 33 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Run the single-task implementation pipeline (no planning phase). If no task is provided, ask first.
Load agent files on demand — never pre-load all at once; use references/output-format.md headers and show a Pipeline Summary after each Verdict.
Full sub-task loop detail: references/loop.md.
Contract
- Input: a single coding task (tech stack derived from the existing codebase if present).
- Output: implemented, tested sub-tasks, each with a Verdict, its own reviewed PR into
release/{slug}-{key}, and a[{key}]-prefixedPROGRESS.mdentry at repo root; then a PR fromrelease/{slug}-{key}tomain, reviewed by/pr-reviewwith its findings posted. - Boundary: no full planning phase — starts at Architecture; per sub-task max ~200 lines with a clear interface boundary, split if not independently testable.
- Rules: Coder owns tests + implementation, written against the frozen Test Case table and falsified before handoff; story ACs + that table are the frozen acceptance contract; Reviewer and StressTester run only after QA approval or escalation; unmitigated CRITICAL security is automatic NOT READY.
Model assignment
Dispatch the Architect on opus; Scrum Master, Plan Reviewer, QA, Reviewer, Stress, Verdict, and the orchestrator on sonnet; the Coder (core + backend/frontend overlay), Tuner, DevOps, and any read-side Explore/mapping sub-agent on haiku (see CLAUDE.md Model assignment table).
Steps
- Delivery setup (once) — derive the slug + key from the task name, create
.worktrees/dlv-{key}/on branchrelease/{slug}-{key}, and run everything inside it, per ../../references/delivery-and-worktree.md. An existing worktree for the key means resume, not recreate. Never commit or merge tomain— the terminal step is a PR from the release branch. - Planning (once) — follow
skills/planning/SKILL.mdfrom Phase 0.5 (Codebase Discovery), then Architecture, then the Phase 2.5 plan review — Priya must returnPLAN APPROVED(or her leftover findings must reach the human) before any code; run the Backend-Driven Architecture tier check; produce and confirm a Task Manifest (sizing rules and tier check detail in references/loop.md). If the session is not the orchestrator (prompt does not open with "You are the delivery orchestrator") and the manifest has ≥ 2 sub-tasks or the codebase map shows a wide blast radius, print once, then continue (never stop): "Exit, then run:claude --agent orchestrator, and inside it:/task {args}". A narrow single-sub-task change prints nothing. - Execution options — planning's own step 8 runs the checkpoint (
bench-context.py --manifest): dispatch counts and a token range for as-planned / all-standard / legacy-full-loop. Do not enter the sub-task loop until the operator has picked or edited the manifest's rosters. - Sub-task loop — repeat per sub-task, one at a time (sub-tasks share the delivery worktree, so never dispatch two Coders concurrently), roster-driven: each sub-task's manifest
Rosterdecides which of A story (ScrumMaster, only when the manifest has ≥ 2 rows) → B code onfeat/{key}-{story-slug}cut from the release branch — implement to spec, write the specified tests, falsify each (Coder + one tier overlay) → C QA audit + gates → D review (Reviewer folds in the Stress lens onlight/standard; StressTester dispatched separately only for rosterfull) → E verdict → F story PR intorelease/*as a draft, reviewed inline by step D's Reviewer — no story-level/pr-review— merge--no-ffonce no findings remain, then checkpoint +PROGRESS.md. Exact dispatch, routing signals, Bug-Fix Loop, Tuner limits, checkpoint table, and context budget are in references/loop.md. - Finish — when a sub-task is PRODUCTION READY, load
agents/devops.mdfor Docker/CI artifacts; otherwise continue to the next sub-task. When all sub-tasks are done, push the release branch (ask first) and open a PR tomain. - Delivery PR review — run
/pr-reviewon the release PR with the delivery file, Reuse Map, Blast Radius, and manifest in context. Each sub-task was already reviewed on its own story PR; this second pass has a different job, because no story review saw the delivery as one diff, so cross-sub-task duplication and plan drift are only visible here. It posts inline comments and prints the Gaps block (unimplemented ACs · spec drift · missing Test Case rows · duplication %). Then print the final summary. Never merge — the PR stays open for the human.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +1 lines fe3852a1591d
- 22d ago Changed · +3 lines 65c404f8f000
- 1mo ago Changed · +41 tokens per session 46c83d6b6701
- 1mo ago Changed · +1 lines 6615f36ef514
- 1mo ago First seen · 28 lines · 46 tokens per session scan A c597daeea436
task is a skill published in the GitHub repository LuisFelipeMoro/Harness-devkit (13 stars, last pushed today), licensed MIT. It adds 87 tokens to every session and 1,210 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
component-fixtures
Use when creating or updating component fixtures for screenshot testing or their shared infrastructure, or when designing UI components to be fixture-friendly. Covers fixture file structure, theming, service setup, CSS scoping, async rendering, validation, and common pitfalls.