Harness · 综合市场
Harness
让 AI 的能力，落到实处。
技能、MCP 服务、提示词、助手与连接器。每一项都写明作者、版本和所需权限。
已上架21,000
- MCP 服务18,849
- 技能1,282
- 助手651
- 提示词218
共 0 项
安全
addyosmani 103kSecurity AuditorSecurity engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.助手安全编程- affaan-m 275kC# reviewerExpert C# code reviewer specializing in .NET conventions, async patterns, security, nullable reference types, and performance. Use for all C# code changes.助手Sonnet安全
anthropics 38kScan redactorRestricted agent dispatched by the Claude Security scan jobs to replace the credential values in a finished scan's report files with [REDACTED]; not for direct invocation.助手Sonnet文件安全- addyosmani 103kSenior Code ReviewerSenior code reviewer that evaluates changes across five dimensions — correctness, readability, architecture, security, and performance. Use for thorough code review before merge.助手安全编程架构
- affaan-m 275kDatabase ReviewerPostgreSQL database specialist for query optimization, schema design, security, and performance. Incorporates Supabase best practices.助手Sonnet数据库安全
- affaan-m 275kFastAPI reviewerReviews FastAPI applications for async correctness, dependency injection, Pydantic schemas, security, OpenAPI quality, testing, and production readiness.助手Sonnet安全测试后端
- affaan-m 275kNetwork config reviewerReviews router and switch configurations for security, correctness, stale references, risky change-window commands, and missing operational guardrails.助手Sonnet安全
- addyosmani 103kDoubt-Driven DevelopmentSubjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption cross-examined before proceeding, when stress-testing a plan for hidden failure modes, when correctness matters more than speed, when working in unfamiliar code, when stakes are high (production auth, security-sensitive logic, a high-stakes migration, irreversible operations), or any time a confident output would be cheaper to verify now than to debug later.技能无代码安全测试
- msitarzewski 158kThreat Intelligence AnalystCyber threat intelligence specialist who tracks adversary groups, maps attack campaigns to MITRE ATT&CK, produces actionable intelligence reports, and builds detection rules that catch real threats.助手安全地图与位置营销与 SEO
- affaan-m 275kTypeScript reviewerExpert TypeScript/JavaScript code reviewer specializing in type safety, async correctness, Node/web security, and idiomatic patterns. Use for all TypeScript and JavaScript code changes.助手Sonnet安全
- anthropics 38kScan inventoryRestricted read-only repository cartographer dispatched by the Claude Security scan workflow to partition the tree into components and account for every top-level directory; not for direct invocation or vulnerability research.助手Sonnet安全研究
trailofbits 7.4kDimensional Analysis SkillAnnotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol, offchain code, or other blockchain-related codebase with arithmetic. Prevents dimensional mismatches and catches formula bugs early.技能无代码安全
openai 28kSecurity Best PracticesPerform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.技能无代码安全编程
wshobson 40kReverse engineerExpert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis. Masters IDA Pro, Ghidra, radare2, x64dbg, and modern RE toolchains. Handles executable analysis, library inspection, protocol extraction, and vulnerability research.助手Opus安全研究- msitarzewski 158kApplication Security EngineerAppSec specialist who secures the software development lifecycle through threat modeling, secure code review, SAST/DAST integration, and developer security education that makes secure code the default.助手安全教育编程
- affaan-m 275kJava reviewerExpert Java code reviewer for Spring Boot and Quarkus projects. Automatically detects the framework and applies the appropriate review rules. Covers layered architecture, JPA/Panache, MongoDB, security, and concurrency.助手Sonnet数据库安全后端
- affaan-m 275kPython reviewerExpert Python code reviewer specializing in PEP 8 compliance, Pythonic idioms, type hints, security, and performance. Use for all Python code changes.助手Sonnet安全法律
- wshobson 40kIncident response code reviewerReviews code for logic flaws, type safety gaps, error handling issues, architectural concerns, and similar vulnerability patterns. Provides fix design recommendations.助手Sonnet安全
- affaan-m 275kSecurity ReviewerSecurity vulnerability detection and remediation specialist. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10 vulnerabilities.助手Sonnet金融安全
- affaan-m 275kReact reviewerExpert React/JSX code reviewer specializing in hook correctness, render performance, server/client component boundaries, accessibility, and React-specific security. Use for any change touching .tsx/.jsx files or React component logic.助手Sonnet文件安全前端
- anthropics 38kCode reviewerReviews code for bugs, logic errors, security vulnerabilities, code quality issues, and adherence to project conventions, using confidence-based filtering to report only high-priority issues that truly matter助手Sonnet安全
- trailofbits 7.4kSemgrep Rule CreatorCreates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.技能无代码安全写作
- wshobson 40kGraphQL architectMaster modern GraphQL with federation, performance optimization, and enterprise security. Build scalable schemas, implement advanced caching, and design real-time systems.助手Opus安全后端架构
- anthropics 38kScan loaderRestricted read-only loader dispatched by the Claude Security scan workflow to return one JSON file from the run directory; not for direct invocation.助手Sonnet安全