Is manage-delegates safe to install?

SaferSkills independently audited manage-delegates (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/manage-delegates/SKILL.md · 1 file

skills/manage-delegates/SKILL.md4.3 KB · Markdown

name: manage-delegates

description: >-

Monitor and manage Harness Delegates via MCP. List delegates and check health status, manage delegate

registration tokens (create, revoke, delete), and find which delegates are associated with a token.

Use when asked about delegate status, delegate health, delegate connectivity, delegate tokens, or

troubleshooting delegate issues. Trigger phrases: delegate status, delegate health, list delegates,

delegate token, delegate connectivity, delegate troubleshooting, delegate down.

metadata:

author: Harness

version: 1.0.0

mcp-server: harness-mcp-v2

license: Apache-2.0

compatibility: Requires Harness MCP v2 server (harness-mcp-v2)

Manage Delegates

Monitor delegate health and manage registration tokens via MCP.

Instructions

Step 1: List Delegates

List all delegates in the account to check health and connectivity:

Call MCP tool: harness_list
Parameters:
  resource_type: "delegate"

This returns all delegates with their status, version, connectivity, and last heartbeat. Delegates are account-scoped -- no org/project needed.

Step 2: List Delegate Tokens

Call MCP tool: harness_list
Parameters:
  resource_type: "delegate_token"
  org_id: "<organization>"
  project_id: "<project>"

Filter by name or status:

Call MCP tool: harness_list
Parameters:
  resource_type: "delegate_token"
  name: "prod-token"
  status: "ACTIVE"

Step 3: Get Token Details

Call MCP tool: harness_get
Parameters:
  resource_type: "delegate_token"
  resource_id: "<token_name>"
  org_id: "<organization>"
  project_id: "<project>"

Step 4: Create a Token

Call MCP tool: harness_create
Parameters:
  resource_type: "delegate_token"
  org_id: "<organization>"
  project_id: "<project>"
  body:
    name: "prod-delegate-token"

Step 5: Find Delegates for a Token

Call MCP tool: harness_execute
Parameters:
  resource_type: "delegate_token"
  action: "get_delegates"
  resource_id: "<token_name>"
  org_id: "<organization>"
  project_id: "<project>"

Step 6: Revoke a Token

Call MCP tool: harness_execute
Parameters:
  resource_type: "delegate_token"
  action: "revoke"
  resource_id: "<token_name>"
  org_id: "<organization>"
  project_id: "<project>"

Step 7: Delete a Token

Call MCP tool: harness_delete
Parameters:
  resource_type: "delegate_token"
  resource_id: "<token_name>"
  org_id: "<organization>"
  project_id: "<project>"

Resource Types

Resource Type	Scope	Operations	Description
`delegate`	Account	list	List delegates with health status
`delegate_token`	Project	list, get, create, delete + revoke, get_delegates actions	Manage registration tokens

Examples

"Are all delegates healthy?" -- List delegates, check status and last heartbeat
"Create a new delegate token for the staging project" -- Create token with project scope
"Which delegates are using the prod-token?" -- Execute get_delegates action on the token
"Revoke the old registration token" -- Execute revoke action
"Show me all active delegate tokens" -- List tokens filtered by status ACTIVE

Performance Notes

When diagnosing delegate issues, check both the delegate list (for health/heartbeat) and the token status (for auth). A delegate showing as disconnected may have a revoked token.
Always verify delegate connectivity before troubleshooting pipeline failures -- many execution errors stem from unavailable delegates.

Troubleshooting

Delegate Shows Disconnected

Check the delegate's last heartbeat timestamp -- if stale, the delegate process may be down
Verify the delegate token is ACTIVE (not REVOKED)
Check network connectivity between the delegate host and Harness SaaS

Pipeline Fails with "No Delegates Available"

List delegates to confirm at least one is connected and healthy
Check if the pipeline uses a delegate selector that doesn't match any active delegate
Verify the delegate has the required tools installed (kubectl, helm, docker, etc.)

Token Issues

Tokens are project-scoped -- a token created in project A cannot register delegates for project B
Revoking a token disconnects all delegates registered with it
Deleted tokens cannot be recovered -- create a new one and re-register delegates

manage-delegates— agent skill

Is manage-delegates safe to install?

Manage Delegates

Instructions

Step 1: List Delegates

Step 2: List Delegate Tokens

Step 3: Get Token Details

Step 4: Create a Token

Step 5: Find Delegates for a Token

Step 6: Revoke a Token

Step 7: Delete a Token

Resource Types

Examples

Performance Notes

Troubleshooting

Delegate Shows Disconnected

Pipeline Fails with "No Delegates Available"

Token Issues

Audit the pieces. Scan the whole. Decide.