H

harness-scope

shimo4228/harness-scope · v0.1.7 · Development & Workflow

by shimo4228Scan grade: GoodAwesome AI Plugins

Claude Code mod that turns global skills, agents, rules files and tools on or off per repo through named profiles kept in ~/.claude, with no network or model calls

InstallSourceClaim this plugin
Follow0
Trust Score74Security scan83ComponentsScan pending
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is harness-scope a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code

Before you install

Sign-in
Not declared
Settings it asks for
Claude Code configuration directory
Declared access
Not declared
License
MIT

Check before relying on it

  • The publisher has not verified ownership on HOL.

What is harness-scope?

harness-scope is a published development & workflow plugin for AI coding agents in the Claude Code ecosystem, developed by shimo4228 and distributed through the HOL AI plugin registry. Claude Code mod that turns global skills, agents, rules files and tools on or off per repo through named profiles kept in ~/.claude, with no network or model calls.

Canonical slug
shimo4228/harness-scope
Version
v0.1.7 · updated Nov 2, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes

Trust and security

Trust & reputation

74

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
40/100
MCP server setup
100/100
Plugin Security
83/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
plugin
Source repo
https://github.com/shimo4228/harness-scope
Source commit
ae2e0e5922d0…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
83
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-lxvBnA / cisco-skill-scanner: skippedcodex:hol-plugin-scanner-lxvBnA / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

13/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

21/31

9 checks

[codex:.] Security

13/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

6/9

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

N/A

3 checks · not applicable

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 2 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the harness-scope entry from the harness-scope marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall harness-scope@harness-scope.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "harness-scope",
  "version": "0.1.7",
  "description": "Turn global skills, rules, agents and tools on or off per repo with named profiles. Add a one-line .claude/harness-scope.json to a repo; /harness-scope shows what is off",
  "icon": "./.claude-plugin/icon.png",
  "author": {
    "name": "shimo4228"
  },
  "keywords": [
    "claude-code",
    "mod",
    "hooks",
    "profiles",
    "skills",
    "context"
  ],
  "license": "MIT",
  "userConfig": {
    "configDir": {
      "type": "string",
      "title": "Claude Code configuration directory",
      "description": "Where your profiles live (<this>/harness-scope/profiles/). Leave empty: it is read off where the plugin is installed. Set it when you load the plugin with --plugin-dir.",
      "default": ""
    }
  },
  "repository": "https://github.com/shimo4228/harness-scope",
  "interface": {
    "displayName": "harness-scope",
    "developerName": "shimo4228"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/shimo4228/harness-scope
Marketplace path
.claude-plugin/marketplace.json
Source path
plugin
Install policy
Unspecified

File inventory

.claude-plugin/plugin.json

file

763 bytes

8c65327b4fe104fd…

.codex-plugin/plugin.json

plugin-manifest

857 bytes

12f0bf2cff12ddf8…

hooks/bundled.ts

file

541 bytes

a6e8943cb7ed2dc9…

hooks/hooks.json

file

78 bytes

2fd0d3e6acfe5918…

hooks/instructions.ts

file

945 bytes

d550f7423590e521…

hooks/listing.ts

file

4,813 bytes

09e957a3f350eef9…

hooks/profile.ts

file

5,363 bytes

97ff6caef1d83745…

hooks/register.ts

file

17,511 bytes

0ea22e996234c146…

LICENSE

file

1,432 bytes

5a9c600e400aae3e…

README.md

file

4,783 bytes

d0a0bb7b4589b03b…

tsconfig.json

file

56 bytes

4087cf0ba92fde50…

harness-scope — Frequently asked questions

What is harness-scope?
harness-scope is an AI plugin in the HOL registry. Claude Code mod that turns global skills, agents, rules files and tools on or off per repo through named profiles kept in ~/.claude, with no network or model calls.
How do I install harness-scope?
Install harness-scope in your harness: Claude Code — /plugin marketplace add shimo4228/harness-scope. Full step-by-step guidance is on the HOL plugin page.
How do I install harness-scope in HOL Guard?
To install harness-scope in HOL Guard, start with hol-guard plugin install shimo4228/harness-scope --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install harness-scope in Claude Code?
To install harness-scope in Claude Code, start with /plugin marketplace add shimo4228/harness-scope. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for harness-scope computed?
harness-scope has a HOL Trust Score of 74 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/shimo4228%2Fharness-scope/trust
Who publishes harness-scope?
harness-scope is published by shimo4228 and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from harness-scope.

Alternatives in Development & Workflow

See all Development & Workflow plugins

More from shimo4228

Reviews and similar plugins