long-running-agent-harness
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's files, scripts, and runtime instructions are coherent with its stated purpose of orchestrating a long‑running agent harness (it initializes templates, reads/writes progress & feature files, and guides coding sessions); nothing requested is disproportionate or unrelated to that goal.
This skill appears to do what it says: scaffold per-session feature tracking, prompt agents, and run git commits. Important cautions: 1) The harness will create and modify files in whatever directory you run it in and can run git init / git commit — do not run it in a production or important repository without a backup or in a throwaway clone. 2) The provided init.sh is a template that could be customized to run arbitrary commands; review its contents before executing. 3) The coding prompts instruct agents to run tests and use browser automation/curl — ensure required tooling is installed and sandbox any automation you don't trust. 4) The skill expects you to paste prompts to an external Claude agent/service (per README/prompt guidance); be mindful of any data you send there. If you want extra safety, run the harness in an isolated directory, inspect and edit the templates (init.sh, feature_list.json) before use, and keep version control (or a disposable branch) so you can review or revert commits.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.