harness-ops
Claude Code operations: audit-skill-visibility (skills the listing budget hides), inventory (every invocable surface), audit-install-state, audit-performance (slowness), audit-mod-posture (mods and the guard), audit-native-overlap (skills duplicating built-ins), observability (telemetry), known-issues, changelog, behavior-probes, prerequisites, check, machine-profile, plugins (update the fleet), lanes (background loop sessions), setup. Plus opt-in hook event logs.
- Created
- 5 months ago
- Last commit
- 2 hours ago
Ecosystem
1 related extensionSecurity Findings
5Unicode smuggling
MaliciousBundledSource code contains 4 suspicious invisible unicode chars
skills/audit-native-overlap
No tagged releases
SuspiciousLineageRepo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions
In-process hooks module
SuspiciousScannerRuns in the Claude Code process. Hooks: classic.ConfigChange, classic.CwdChanged, classic.DirectoryAdded, classic.Elicitation, classic.ElicitationResult, classi.... Calls: $.env.get, $.process.run. Informational, does not affect the trust score
hooks/register.ts
Hooks module intercepts agent events2×
SuspiciousScannerHooks classic.ConfigChange, classic.CwdChanged, classic.DirectoryAdded, classic.Elicitation, classic.ElicitationResult, classi...: can answer or skip settings hooks for these events
Hooks classic.Notification, classic.PreCompact, classic.SessionEnd, classic.SessionStart, classic.Stop, classic.SubagentStart,...: lifecycle settings hooks. Informational, does not affect the trust score
hooks/register.ts
Contents
19 skills bundled by this extension
audit-native-overlap
skill
Why it’s flagged
Unicode smuggling
Source code contains 4 suspicious invisible unicode chars
audit-mod-posture
skill
behavior-probes
skill
control-claude-code
skill
inventory
skill
lanes
skill
observability
skill
plugins
skill
audit-install-state
skill
audit-performance
skill
audit-plugin-landscape
skill
audit-skill-visibility
skill
changelog
skill
demo
skill
known-issues
skill
machine-profile
skill
plugins-audit
skill
prerequisites
skill
setup
skill
Editions
5- Scanned Nov 15, 2026, 08:01 PMHigh
- Scanned Nov 14, 2026, 08:01 PMHigh
- Scanned Nov 13, 2026, 08:32 PMHigh
- Scanned Nov 11, 2026, 08:20 PMHigh
- Scanned Nov 10, 2026, 08:19 PMHigh