Harness-engineering harness-security-scan

name: harness-security-scan version: "1.0.0" description: Lightweight mechanical security scan for health checks stability: static cognitive_mode: meticulous-implementer triggers:

• manual
• on_milestone platforms:
• claude-code
• gemini-cli
• cursor
• codex tools:
• Bash
• Read
• Glob
• Grep cli: command: harness skill run harness-security-scan args:
  • name: path description: Project root path required: false
  • name: severity description: Minimum severity threshold (error, warning, info) required: false
  • name: changed-only description: Only scan git-changed files required: false mcp: tool: run_skill input: skill: harness-security-scan path: string type: rigid tier: 2 phases:
• name: scan description: Run SecurityScanner and filter by severity threshold required: true related_skills:
• security-threat-modeling-stride
• security-threat-modeling-process
• security-zero-trust-principles
• security-audit-log-design
• security-injection-families state: persistent: false files: [] depends_on: [] addresses:
• signal: security-findings hard: true