harness-score — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited harness-score (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Surfaces the upstream metaharness score CLI as a ruflo skill. Use when Claude Code needs to assess whether a repo is ready for harness adoption before recommending the user run npx ruflo init or harness-mint.
Implementation: scripts/score.mjs.
npx metaharness score <path> --json (single subprocess,60s hard timeout).
toolSafety, memoryUsefulness, estCostPerRunUsd, recommendedMode, archetype, template, scaffoldReady, hardConstraints }`.
--alert-on-fit-below N: exit 1 when harnessFit < N.| Dimension | Value |
|---|---|
| harnessFit | 82/100 |
| compileConfidence | 100 |
| taskCoverage | 79 |
| toolSafety | 100 |
| memoryUsefulness | 40 |
| estCostPerRunUsd | $0.048 |
| recommendedMode | CLI + MCP |
| archetype | typescript-sdk-harness |
| template | vertical:coding |
| scaffoldReady | true |
Ruflo passes its own readiness check. memoryUsefulness: 40 is the weakest dimension — track this as a leading indicator for future memory work in the AgentDB layer.
node plugins/ruflo-metaharness/scripts/score.mjs --alert-on-fit-below 70 --format jsonExit 1 fails the build. Pair with harness-genome for the full 7-section view.
When metaharness is not installed and npx can't fetch it (offline, no network, registry unreachable), the script emits:
{
"degraded": true,
"reason": "metaharness-not-available",
"hint": "Install metaharness manually with `npm i -D metaharness` or run `npx metaharness@latest --version` to verify network access."
}and exits 0. Ruflo continues to function — this is the architectural constraint in action.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.