Sandbox
@addxai/enterprise-harness-engineering

AI agent skills for code, ops, and security

This repo packages a catalog of Markdown skills that teach coding agents how to handle software delivery, operations, security checks, observability, and product workflows. It is built to be installed into Claude Code, Cursor, Windsurf, Gemini CLI, Copilot, Codex, and other agents as reusable skill folders or as a Claude Code plugin.

44 stars6 forksPythonUpdated 5mo ago
Who it's for

Builders who want their coding agent to follow repeatable workflows for development, operations, security, and product work.

What it delivers

You can add reusable workflows to your agent instead of re-explaining how to do the work each time.

What it does

Packaged skill catalog

Provides named skill folders under `skills/` for architecture, code review, dev workflow, testing, GitLab, SRE, monitoring, security, and VOC analysis.

Claude Code plugin install

Includes `.claude-plugin/plugin.json` and marketplace metadata so the repo can be installed through Claude Code’s plugin flow.

Multi-agent compatibility

Documents install paths for Claude Code, Cursor, Windsurf, and the shared `.agents/skills/` layout used by Gemini CLI, Copilot, Codex, and others.

Operational skills

Covers skills for Grafana, Prometheus, Kubernetes ops, Sentry, GitLab CI, and merge request handling.

Security and compliance skills

Includes skills for Terraform audit, security review, local security checks, and secret scanning with TruffleHog.

How to get it

  1. 1Run
    # Install as a plugin (recommended)
    /plugin marketplace add addxai/enterprise-harness-engineering
    
    # Then install specific skills
    /plugin install enterprise-harness-engineering
  2. 2Run
    # Clone and copy skills to your project
    git clone https://github.com/addxai/enterprise-harness-engineering.git
    cp -r enterprise-harness-engineering/skills/* .cursor/skills/
    
    # Or install globally
    cp -r enterprise-harness-engineering/skills/* ~/.cursor/skills/
  3. 3Run
    git clone https://github.com/addxai/enterprise-harness-engineering.git
    cp -r enterprise-harness-engineering/skills/* .windsurf/skills/
    
    # Or install globally
    cp -r enterprise-harness-engineering/skills/* ~/.codeium/windsurf/skills/
  4. 4Run
    git clone https://github.com/addxai/enterprise-harness-engineering.git
    cp -r enterprise-harness-engineering/skills/* .agents/skills/
    
    # Or install globally
    cp -r enterprise-harness-engineering/skills/* ~/.agents/skills/
  5. 5Run
    # Example: install only the sre-agent skill
    git clone --depth 1 https://github.com/addxai/enterprise-harness-engineering.git
    cp -r enterprise-harness-engineering/skills/sre-agent .claude/skills/

README

中文 | English

Enterprise Harness Engineering

Enterprise-grade AI Agent Skills for software development, DevOps, SRE, security, and product teams.


Over the past year, almost every company has been "using AI" -- adopting Cursor, Claude Code, running a few training sessions. Yet the results rarely match expectations.

The problem is not that AI is not powerful enough. The problem is that your enterprise was not designed for AI.

An enterprise needs to cross three chasms to be truly AI-driven:

  • Human habits. The more experienced people are, the more they default to "is this really allowed?" instead of "why not?"
  • Tool interfaces. Most internal tools are GUI-only -- designed for humans clicking buttons. AI calls APIs. No API means AI cannot operate, and entire departments are excluded from AI transformation.
  • Organizational structure. Assembly-line dependencies -- I finish then hand off to you, you finish then hand off to the next person. Every extra person in the loop is another blocking point.

The root cause is the same: existing enterprises are designed for human-to-human collaboration, not human-to-AI collaboration.

Giving everyone a chainsaw but keeping the factory designed for handsaws -- workstations too small, voltage too low, assembly line unchanged -- gets you 1.2x, not 10x.

10x is easier than 2x. 2x means optimizing within the old framework. 10x means adopting a new one. Enterprise Harness Engineering is that new framework.


What is Enterprise Harness Engineering

Harness Engineering has become a popular concept in the tech community -- building feedback loops, testing frameworks, and runtime environments for AI Agents so they can autonomously verify and deliver code. This is right, but it only solves part of the problem.

Enterprise Harness Engineering extends Harness Engineering to the enterprise level. It is not just about building feedback loops for AI coding agents -- it is about making every layer of the enterprise AI-accessible:

  • Can the technology be AI-harnessed? Does the code have closed-loop feedback? Can AI autonomously verify and deliver?
  • Can the tools be AI-harnessed? Do internal systems have APIs? Can AI operate them directly?

The core formula:

Enterprise AI Readiness = Tech Loop x Tool API

This is multiplication, not addition. If either dimension is zero, the total is zero:

MissingSymptomResult
Tech HarnessAI writes code but nobody knows if it is correctNo real productivity gain; extra review burden instead
Tool HarnessR&D uses AI but other departments are still clicking buttonsAI adoption stays confined to engineering

Most companies have only addressed a fraction of the tech layer. Tool layer remains untouched. The result: 1.2x, not 10x.


Harness Architecture

The 4-Layer Stack: Human -> Agent -> Skill -> Tool

+----------------------------------------------------------+
|                   Human (Judgment & Decision)             |
|                                                          |
|  Provides intent, business context, final decisions      |
|  No need to remember Skill names -- describe in          |
|  natural language what you want to do                    |
+----------------------------+-----------------------------+
                             | Natural Language
+----------------------------v-----------------------------+
|                   Coding Agent Layer                      |
|                                                          |
|  Claude Code / Cursor / OpenClaw                         |
|  - Understand intent -> select Skill -> orchestrate      |
|  - Multi-Skill composition, cross-department calls       |
|  - Same Agent + different Skills = different roles       |
+----------------------------+-----------------------------+
                             | Invocation
+----------------------------v-----------------------------+
|                      Skill Layer                          |
|                                                          |
|  ~100 Skills across 6 departments                        |
|  - Each Skill is a Markdown document                     |
|  - Encodes expert experience: triggers, steps, rules     |
|  - Everything as Code: Git-managed, Code Review enforced |
+----------------------------+-----------------------------+
                             | Operation
+----------------------------v-----------------------------+
|                       Tool Layer                          |
|                                                          |
|  SaaS -- Collaboration / Dev (GitLab, Sentry) /          |
|          Data (DataHub, Superset) / Ops (Grafana, K8s)   |
|  Internal Platforms -- IoT platform / Test automation     |
|  Hardware Toolchain -- Firmware build / Instruments       |
+----------------------------------------------------------+

Each layer has a clear purpose:

Tool Layer -- Everything as Code or SaaS. Eliminate manual operations. All tools must be SaaS or API-accessible. All operations must be codified. Infrastructure uses Terraform (IaC), deployments use ArgoCD (GitOps), secrets use Vault, CI uses GitLab Pipeline. Nobody clicks buttons in a console. Nobody runs scripts locally. Everything as Code or Data -- manual operations are the enemy of AI closed loops. Only when all state is API-queryable and all changes have audit trails can AI Agents see the full context.

Skill Layer -- Encode expert knowledge into AI-executable workflows. Skills are not just API documentation. They encode how senior experts think -- how they judge, how they decide, what rules they follow -- into Markdown. Skills are the crystallization of professional knowledge. Once encoded, an employee's core expertise can be executed in parallel by AI, amplified infinitely through tokens.

Coding Agent Layer -- Unified entry point, free orchestration. No need to build a specialized bot for every scenario. The same Coding Agent, loaded with different Skills, becomes different roles. And it can natively write code -- when it finds a bug, it does not just notify someone; it reads the source, writes the fix, and submits a merge request.

Skill: Not API Docs, but Organizational Muscle Memory

A Skill does not just tell AI "how to call this API." It encodes a senior expert's entire judgment framework:

  • A VOC Analysis Skill does not just call APIs to scrape data -- it encodes how a senior product manager reads reviews, identifies trends, and benchmarks against competitors.
  • A WiFi Tuning Skill does not just control instruments -- it encodes how an RF engineer selects initial parameters, judges convergence direction, and defines pass/fail criteria.
  • An SRE Alert Handling Skill does not just read Grafana metrics -- it encodes how an on-call engineer triages, identifies root causes, and decides when to scale vs. when to rollback.

The old model: Human Skill x Time = Output -- one person, 8 hours a day.

The new model: Professional Knowledge x Token = Output -- the same expertise executed in parallel by AI, amplified infinitely, no longer bounded by human time. Skills are the crystallization of knowledge. AI is the amplifier.


Agent Personas: One Agent, Many Roles

The same Coding Agent, loaded with different Skill combinations, becomes a different Agent Persona:

PersonaDomainCore Skill StackTypical Workflow
Software R&D AgentSoftware Devdev-workflow + architect + gitlab-mr + testing-strategyRequirement -> Design -> Code -> Test -> MR -> Deploy (9-step loop)
SRE AgentOperationssre-agent + prometheus + k8s-ops + grafana + argocdAlert -> Triage -> Root Cause -> Fix -> Notification
Data AgentData Analyticsdatahub-schema-search + superset + dagster"Last week's DAU trend" -> Find table -> SQL -> Chart -> Report
Customer Support AgentCustomer Successtroubleshooting + cs-workspace + sla-alert-analysisDevice offline -> Log search -> Root cause -> Diagnosis report -> Update ticket
Product AgentProduct Planningvoc-analysis + market-analysis + story-craftsmanVOC scraping -> Sentiment analysis -> Competitive comparison -> Trend report
BSP/HW AgentHardware Devfirmware-build + embed-ci-setup + instrument-opsTune params -> Flash firmware -> Measure -> Analyze -> Iterate until pass

Personas are not independent Agent services -- they are working modes of the Coding Agent. Switch the Skill set, switch the role. No deployment, no integration, no maintenance.


Why Not Traditional Specialized Agents

Many companies build specialized AI Agents using LangChain/LangGraph -- hardcoded workflows, independent services. We chose a fundamentally different approach:

Traditional Specialized AgentCoding Agent + Skills
ArchitectureOne independent service per scenario, dedicated code, dedicated deploymentOne universal Coding Agent, Skills are Markdown docs
Capability boundaryCan only do one thing; workflow is hardcodedFree cross-department composition -- SRE scenario can call the data team's superset
Extension costNew scenario = write code + deploy + maintainNew scenario = write a Markdown document
Who maintainsRequires AI engineersDomain experts write Skills themselves
Cross-scenario collaborationAgents need integration protocolsSame Agent, natively cross-scenario
Repair capabilityCan only diagnose and notifyCan read source, write fix, submit MR -- because it IS a Coding Agent

The last row is the decisive advantage: a Coding Agent can natively write code. A traditional SRE Agent that finds a bug can only notify a human. A Coding Agent can read the source, write the fix, run tests, and submit a merge request. Skills tell it how to find the problem; once found, it inherently has the ability to fix it. This is not "AI-assisted" -- it is "AI end-to-end closed loop."


Core Principles

PrincipleOne-line Explanation
Agent-FirstCoding Agent is the unified entry point for all AI workflows. Human -> Agent -> Tool, not Human -> GUI -> Tool
Skill as KnowledgeProfessional knowledge encoded as Skills, executed in parallel by AI, amplified infinitely through Tokens
Everything as CodeSkills, Agent config, Hooks -- all version-controlled, Code Review enforced, traceable and rollback-able
Unified ObservabilityObservable means actionable -- if the Agent can see the data, it can analyze, decide, and act
Source of Truth in SaaSNo separate knowledge bases. Pull data directly from existing systems. Collaboration platform = docs, data catalog = schemas, code repo = code
No AI-Opaque GUINever build GUI-only tools that AI cannot operate. Every tool must have a CLI or API entry point

These principles share a common direction: make AI a first-class citizen. Every system, every data source, every tool in the enterprise must be visible, operable, and verifiable by AI.


Skills Catalog

25 Skills across 6 categories:

Software Development

SkillDescription
architectArchitecture design through Socratic questioning, producing structured technical documents
dev-workflow9-step development lifecycle orchestrator from User Story to CD
story-craftsmanGuided interview to produce structured User Stories
doc-writingHWPR/AWOR framework separating human judgment from AI expansion
testing-strategyLayered testing architecture (L1-L4) with TDD workflow
code-reviewAI-driven code review with standards compliance
code-submitCross-platform code submission: lint, review, stage, commit, MR
uat-story-writerDiscover missing UAT scenarios and generate Gherkin test cases
multi-worktree-devParallel development with git worktree isolation
mock-engineLocal mock infrastructure management (Docker Compose stack)
embed-ci-setupEmbedded C project CI pipeline with SonarQube scanning
clean-cacheBatch scan and clean Flutter/Android/iOS/Node.js project caches

GitLab Integration

SkillDescription
gitlab-ciGitLab CI pipeline design and optimization (15 best-practice rules)
gitlab-mrDrive MR from creation to mergeable state (CI green + no conflicts)

Monitoring & Observability

SkillDescription
sentryError tracking, crash analysis, and release health monitoring
sentry-onboardingCreate and configure Sentry projects across environments
grafanaQuery and manage Grafana dashboards, alerts, and data sources
prometheusConstruct PromQL queries and analyze metrics
k8s-opsMulti-cluster Kubernetes resource management and troubleshooting

SRE & Operations

SkillDescription
sre-agentSRE intelligence: oncall triage, root cause analysis, patrol, self-improvement

Security & Compliance

SkillDescription
terraform-auditIaC audit across security, cost, quality, and architecture
security-compliance-reviewStructured security and compliance review framework
local-security-checkCheck Skill files for security risks and prompt injection
trufflehog-cliSecret scanning with TruffleHog CLI

Market Research

SkillDescription
voc-analysisMulti-platform Voice of Customer analysis and competitive intelligence

Installation

All skills follow the Agent Skills Specification, compatible with 30+ AI coding agents.

Claude Code (Plugin Marketplace)

# Install as a plugin (recommended)
/plugin marketplace add addxai/enterprise-harness-engineering

# Then install specific skills
/plugin install enterprise-harness-engineering

Cursor

# Clone and copy skills to your project
git clone https://github.com/addxai/enterprise-harness-engineering.git
cp -r enterprise-harness-engineering/skills/* .cursor/skills/

# Or install globally
cp -r enterprise-harness-engineering/skills/* ~/.cursor/skills/

You can also add individual skills via Settings > Rules > Add Rule > Remote Rule and point to a skill directory on GitHub.

Windsurf

git clone https://github.com/addxai/enterprise-harness-engineering.git
cp -r enterprise-harness-engineering/skills/* .windsurf/skills/

# Or install globally
cp -r enterprise-harness-engineering/skills/* ~/.codeium/windsurf/skills/

Universal (.agents/skills/) -- GitHub Copilot, Gemini CLI, Codex, Kiro, Junie, and more

git clone https://github.com/addxai/enterprise-harness-engineering.git
cp -r enterprise-harness-engineering/skills/* .agents/skills/

# Or install globally
cp -r enterprise-harness-engineering/skills/* ~/.agents/skills/

Install a Single Skill

# Example: install only the sre-agent skill
git clone --depth 1 https://github.com/addxai/enterprise-harness-engineering.git
cp -r enterprise-harness-engineering/skills/sre-agent .claude/skills/

Supported Platforms

PlatformProject-level PathGlobal Path
Claude Code.claude/skills/~/.claude/skills/
Cursor.cursor/skills/~/.cursor/skills/
Windsurf.windsurf/skills/~/.codeium/windsurf/skills/
GitHub Copilot.agents/skills/~/.agents/skills/
Gemini CLI.agents/skills/~/.agents/skills/
OpenAI Codex.agents/skills/~/.agents/skills/
Kiro (AWS).agents/skills/~/.agents/skills/
Junie (JetBrains).agents/skills/~/.agents/skills/
Goose (Block).agents/skills/~/.agents/skills/
Roo Code.agents/skills/~/.agents/skills/

Contributing

See CONTRIBUTING.md for guidelines on adding new Skills or improving existing ones.

The short version:

  1. Fork this repository
  2. Create a skill directory under skills/
  3. Add a SKILL.md with proper frontmatter (name and description in YAML frontmatter)
  4. Submit a merge request

About

Built by AddX.ai (积加科技) — an AI-first engineering organization practicing Enterprise Harness Engineering at scale.


License

Apache-2.0

Files in the repo

Repository payload9 top-level entries
  • .claude-plugin
  • skills
  • .gitignore
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • LICENSE
  • README.md
  • README.zh-CN.md
  • SECURITY.md

Discussion (0)

Ask about usage, or say what you built with it

Sign in to join the discussion.

No comments yet. Be the first to say what this is good for.

More skills

obra/
superpowers

An agentic skills framework & software development methodology that works.

285k
1 add

Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.

117k
1 add
Vincentwei1021/
anything2explainer

Topic in, narrated explainer video out. A Claude Code / Codex skill that turns any topic into a black-canvas motion-graphics explainer video with TTS voiceover, subtitles and a chapter progress bar. Chinese or English; every frame drawn in code with Remotion.

666

Open-source AI job search: scan job portals, evaluate listings into a structured A-H report with a global 1-5 score, tailor your CV, track applications — runs locally in your AI coding CLI (Claude Code, Codex, OpenCode, Antigravity…)

71k