Agent Skills › ruvnet/metaharness › validate-harness

validate-harness

GitHub

一键执行5项发布就绪检查（doctor、verify、path-guard、mcp、secrets），自动检测文件结构、签名、硬编码路径及GCP密钥，任一失败即退出。

.claude-plugin/skills/validate-harness/SKILL.md ruvnet/metaharness

Trigger Scenarios

用户需要验证脚手架是否满足发布要求执行 /validate-harness 命令进行预检

Install

npx skills add ruvnet/metaharness --skill validate-harness -g -y

More Options

Non-standard path

npx skills add https://github.com/ruvnet/metaharness/tree/main/.claude-plugin/skills/validate-harness -g -y

Use without installing

npx skills use ruvnet/metaharness@validate-harness

指定 Agent (Claude Code)

npx skills add ruvnet/metaharness --skill validate-harness -a claude-code -g -y

安装 repo 全部 skill

npx skills add ruvnet/metaharness --all -g -y

预览 repo 内 skill

npx skills add ruvnet/metaharness --list

SKILL.md

Frontmatter

{
    "name": "validate-harness",
    "description": "Release-readiness umbrella check for a scaffolded harness — runs doctor, witness verify, hardcoded-path scan, MCP server config, and GCP Secret Manager validation in one shot. Exits non-zero if any sub-check fails."
}

validate-harness

Codex skill that runs the 5 release-readiness gates from harness validate.

What it checks

#	Check	What it does
1	`doctor`	File shape + manifest sha256 + at-least-one host artifact
2	`verify`	Witness manifest signature (Ed25519) — skipped if no witness yet
3	`path-guard`	Scans your TS/JS/Rust files for hardcoded `/tmp/`, `C:\`, `/Users/`, `/home/` — the original Windows `/tmp` bug regression class
4	`mcp`	`.mcp/servers.json` entries have `name` + `command`
5	`secrets`	`gcloud auth list` + project + `NPM_TOKEN` exist in GCP Secret Manager

Each check reports PASS / FAIL / WARN with a one-line detail. Exits 1 if any FAIL.

Usage from Codex

/validate-harness
/validate-harness path=./my-harness
/validate-harness path=./my-harness skip_gcp=true
/validate-harness secret=NPM_TOKEN_DEV

Equivalent CLI

harness validate ./my-harness --skip-gcp --secret=NPM_TOKEN_DEV

Why this exists

Before iter 20, you needed to remember to run harness doctor, harness verify, harness secrets check, and node scripts/path-guard.mjs separately. This is the single release-readiness gate.