Agent skill

Publish Harness

by ruvnet in ruvnet/metaharness

Publish a generated harness to npm — runs the smoke test, signs the witness manifest, and dispatches npm publish --provenance from your tagged release.

MITAuto-check passedTesting & QA

Install Publish Harness

skills CLI
$ npx skills add ruvnet/metaharness --skill publish-harness -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ruvnet/metaharness publish-harness --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ruvnet/metaharness.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude-plugin/skills/publish-harness .claude/skills/publish-harness && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
publish-harness
GitHub stars
696
Token cost
~361 tokens
SKILL.md length
131 words
Files
1
Skills in repo
14
Repo updated
First seen
Licence
MIT

At a glance

Publish a generated harness to npm — runs the smoke test, signs the witness manifest, and dispatches npm publish --provenance from your tagged release.

  • Works in 5 steps: Builds the harness with npm run build → Runs npm test to confirm green tests → Calls harness sign to produce a fresh… → …
  • Tasks that involve QA and bug reports
  • SKILL.md covers What it does, Usage from Codex, Equivalent CLI and Required env, plus 1 more section
  • Calls npm; needs WITNESS_SIGNING_KEY and NPM_TOKEN

What it does

Publish Harness is an agent skill from ruvnet/metaharness. Publish a generated harness to npm — runs the smoke test, signs the witness manifest, and dispatches npm publish --provenance from your tagged release.

Its SKILL.md is about 360 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Testing & QA, covering QA and bug reports. It works with npm and Model Context Protocol. The repository describes itself as: 🛠️ The meta-harness for AI agents — scaffold your own focused, branded agent harness with its own npx CLI, MCP server, memory, learning loop, and witness-signed releases. Works… The licence is MIT.

When your agent uses it

  • Tasks that involve QA and bug reports

Example prompts

  • “/publish-harness”

Requirements

  • A credential in WITNESS_SIGNING_KEY
  • A credential in NPM_TOKEN

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Builds the harness with npm run build
  2. Runs npm test to confirm green tests
  3. Calls harness sign to produce a fresh witness manifest (requires WITNESS_SIGNING_KEY env)
  4. Confirms harness verify accepts the freshly signed manifest
  5. Either

What it can do on your machine

Read from SKILL.md and the folder at commit e0dfd44. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • npm

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use npm, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • WITNESS_SIGNING_KEY
    • NPM_TOKEN

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Publish Harness loads about 361 tokens when it runs. Until then it costs about 42 tokens; SKILL.md has 131 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~42
When it runs · the whole SKILL.md, loaded when a task matches
~361

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from ruvnet/metaharness at commit e0dfd44, republished under its MIT licence (© ruvnet). 131 words, ~361 tokens.

Download SKILL.mdSave it as .claude/skills/publish-harness/SKILL.md (or your agent's skills folder).
name
publish-harness
description
Publish a generated harness to npm — runs the smoke test, signs the witness manifest, and dispatches `npm publish --provenance` from your tagged release.

publish-harness

Codex skill that runs the full smoke-test → witness-sign → npm publish pipeline for a generated harness.

What it does

  1. Builds the harness with npm run build
  2. Runs npm test to confirm green tests
  3. Calls harness sign to produce a fresh witness manifest (requires WITNESS_SIGNING_KEY env)
  4. Confirms harness verify accepts the freshly signed manifest
  5. Either:
    • dry_run=true (default): runs npm publish --dry-run and reports tarball stats
    • dry_run=false: runs the real npm publish --provenance --access public

Usage from Codex

/publish-harness path=./my-harness
/publish-harness path=./my-harness dry_run=false

Equivalent CLI

bash
cd ./my-harness
npm run build
npm test
harness sign
harness verify
npm publish --provenance --access public

Required env

  • WITNESS_SIGNING_KEY — 64-hex-char ed25519 seed (fetch from GCP Secret Manager via harness secrets fetch WITNESS_SIGNING_KEY)
  • NPM_TOKEN — npm registry credential (Codex skill assumes the host has it set, or fetches via harness secrets fetch NPM_TOKEN)

See also

  • validate-harness — release-readiness gate (run this FIRST)
  • harness-secrets — manage GCP-stored signing/publishing tokens

© ruvnet, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .claude-plugin/skills/publish-harness of ruvnet/metaharness.

Open the folder on GitHubat commit e0dfd44

Compare with similar skills

Publish Harness next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Publish Harness compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Publish Harness this skillruvnet/metaharness696—~361Automated safety check: PassMIT
Sage Wiki Integratexoai/sage-wiki623—~861Automated safety check: PassMIT
Smoke Testmastra-ai/mastra29k—~3.3kAutomated safety check: NotesCustom licence
Qwen Code E2E TestingQwenLM/qwen-code28k—~2.1kAutomated safety check: PassApache-2.0
Agentacct Workflowmikehasa/agentacct766—~1.6kAutomated safety check: PassMIT
tmux Real User TestingQwenLM/qwen-code28k—~2.3kAutomated safety check: PassApache-2.0

Similar skills

  • Sage Wiki Integrate

    xoai/sage-wiki

    Pipeline skill that wires sage-wiki into an existing project — detects language, installs the client, runs a smoke test, and reports.

    623 GitHub stars~861 tokensUpdated 3 days ago
    Testing & QAAuto-check passed
  • Smoke Test

    mastra-ai/mastra

    Create a Mastra project using create-mastra and smoke test the studio in Chrome using Chrome MCP server

    29k GitHub stars~3.3k tokensUpdated today
    Testing & QAAuto-check: notes
  • Qwen Code E2E Testing

    QwenLM/qwen-code

    Guides end-to-end testing of the Qwen Code CLI in headless mode with real model calls, MCP test servers and inspection of raw API traffic.

    28k GitHub stars~2.1k tokensUpdated today
    Testing & QAAuto-check passed
  • Agentacct Workflow

    mikehasa/agentacct

    A skill your agent uses when working in a repo with agentacct MCP configured, or when asked to track coding-agent work, smoke-test agentacct integrations, or report objective AI-agent task evidence.

    766 GitHub stars~1.6k tokensUpdated 6 days ago
    Testing & QAAuto-check passed
  • tmux Real User Testing

    QwenLM/qwen-code

    Drives Qwen Code in a real tmux session the way a user would and saves a readable step-by-step transcript of each screen for maintainers to review.

    28k GitHub stars~2.3k tokensUpdated today
    Testing & QAAuto-check passed
  • Validates ROSClaw simulation workflows across MuJoCo, ROS 2, Gazebo and Isaac Sim with evidence-backed smoke tests, never touching a real robot.

    221 GitHub stars~2.5k tokensUpdated today
    Testing & QAAuto-check passed

More from ruvnet/metaharness

All 14 skills in this repo
  • Create Harness

    ruvnet/metaharness

    Scaffold your own focused AI agent harness — pick host (Claude Code, Codex, pi.dev, Hermes), template, agents, skills, and ship a npm-publishable harness with its own npx CLI.

    696 GitHub stars~777 tokensUpdated today
    Auto-check passed
  • Compare Harnesses

    ruvnet/metaharness

    Diff two scaffolded harnesses (ADR-031). An agent skill from ruvnet/metaharness.

    696 GitHub stars~1k tokensUpdated today
    Auto-check passed
  • Diag Harness

    ruvnet/metaharness

    Kernel-version skew check (ADR-027). An agent skill from ruvnet/metaharness.

    696 GitHub stars~835 tokensUpdated today
    Auto-check passed
  • Example Harness

    ruvnet/metaharness

    Scaffold a ready-made AI agent harness in one command from the 19 published @metaharness/ example packages — 9 host integrations (Claude Code, Codex, Hermes, pi.dev, OpenClaw, RVM, Copilot…

    696 GitHub stars~735 tokensUpdated today
    Auto-check passed
  • Oia Manifest

    ruvnet/metaharness

    Emit .harness/oia-manifest.json declaring layer alignment with the OIA v0.1 9-layer reference architecture.

    696 GitHub stars~910 tokensUpdated today
    Auto-check passed
  • Repo Genome

    ruvnet/metaharness

    7-section readiness scorecard for a LOCAL repo. An agent skill from ruvnet/metaharness.

    696 GitHub stars~772 tokensUpdated today
    Auto-check passed

Categories

Questions about Publish Harness

What does Publish Harness do?

Publish a generated harness to npm — runs the smoke test, signs the witness manifest, and dispatches npm publish --provenance from your tagged release. Publish Harness is an agent skill from ruvnet/metaharness. Publish a generated harness to npm — runs the smoke test, signs the witness manifest, and dispatches npm publish --provenance from your tagged release.

When should I use Publish Harness?

Publish Harness fits situations like: tasks that involve QA and bug reports.

How do I install Publish Harness in Claude Code?

Run `npx skills add ruvnet/metaharness --skill publish-harness -a claude-code`. Or copy the skill folder (.claude-plugin/skills/publish-harness in ruvnet/metaharness) into .claude/skills/publish-harness in your project. Claude Code loads it when a task matches its description.

How do I install Publish Harness in Codex?

Run `npx skills add ruvnet/metaharness --skill publish-harness -a codex`. Or copy the skill folder (.claude-plugin/skills/publish-harness in ruvnet/metaharness) into .agents/skills/publish-harness in your project. Codex loads it when a task matches its description.

Can I use Publish Harness in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ruvnet/metaharness --skill publish-harness -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/publish-harness, .gemini/skills/publish-harness, .github/skills/publish-harness and .opencode/skills/publish-harness in your project.

What does Publish Harness need to run?

Going by SKILL.md and its folder, Publish Harness needs the command-line tools its instructions call (npm) and credentials named WITNESS_SIGNING_KEY and NPM_TOKEN. Our summary lists: A credential in WITNESS_SIGNING_KEY; A credential in NPM_TOKEN.

Does Publish Harness access the network?

SKILL.md contains no URLs. Its commands use npm, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Publish Harness safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Publish Harness use?

Publish Harness is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Publish Harness use?

About 361 tokens (SKILL.md is roughly 1.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Publish Harness?

Skills that share tags, products or a category with Publish Harness: Sage Wiki Integrate (xoai/sage-wiki, 623 stars), Smoke Test (mastra-ai/mastra, 29k stars), Qwen Code E2E Testing (QwenLM/qwen-code, 28k stars) and Agentacct Workflow (mikehasa/agentacct, 766 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Publish Harness?

ruvnet (a GitHub user) maintains it in ruvnet/metaharness, which has 696 GitHub stars. The repository holds 14 skills in this directory. The repository was last updated on October 10, 2026.

Source: ruvnet/metaharness on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.