$npx -y skills add xwtro0tk1t-cloud/harness --skill harness-guide--- description: Triggered when the user says "recommend skill", "which skill", "harness guide", "skill recommendation", "what skill should I use", or "suggest a skill". Matches the best Skill for the user's scenario, shows installation status and invocation method. ---
| 1 | # Harness Guide — Skill Recommendation |
| 2 | |
| 3 | --- |
| 4 | description: Triggered when the user says "recommend skill", "which skill", "harness guide", "skill recommendation", "what skill should I use", or "suggest a skill". Matches the best Skill for the user's scenario, shows installation status and invocation method. |
| 5 | --- |
| 6 | |
| 7 | ## Behavior |
| 8 | |
| 9 | 1. Read `references/skill-guide.md` for the scenario → Skill recommendation matrix |
| 10 | 2. Scan `~/.claude/skills/` for installed Skill list |
| 11 | 3. If user describes a specific scenario → precise match recommendation |
| 12 | 4. If no scenario described → display full recommendation matrix + decision tree |
| 13 | |
| 14 | --- |
| 15 | |
| 16 | ## Matching Logic |
| 17 | |
| 18 | ### Scenario Keywords → Skill Mapping |
| 19 | |
| 20 | ``` |
| 21 | security audit / code audit / vulnerability scan |
| 22 | → Check if security-review-skill-for-<project> exists |
| 23 | → Yes → "Use your project-specific audit Skill directly" |
| 24 | → No → "Recommend generating one with security-review-skill-creator first" |
| 25 | |
| 26 | Docker / container / Dockerfile |
| 27 | → security-review-skill-for-docker |
| 28 | |
| 29 | Terraform / IaC / infrastructure as code |
| 30 | → security-review-skill-for-terraform |
| 31 | |
| 32 | SCA / vulnerability denoising / dependency vulnerabilities / CVE |
| 33 | → sca-ai-denoise |
| 34 | |
| 35 | supply chain / dependency poisoning / typosquatting |
| 36 | → supply-chain-audit |
| 37 | |
| 38 | Skill audit / third-party Skill / Skill security |
| 39 | → skills-audit |
| 40 | |
| 41 | web vulnerability / pentest / XSS / SQLi |
| 42 | → web-vuln-analyzer (note: requires Docker configuration) |
| 43 | |
| 44 | Android / APK / reverse engineering / frida |
| 45 | → android-vuln-analyzer (note: requires toolchain) |
| 46 | |
| 47 | new feature / feature development |
| 48 | → superpowers (brainstorming → TDD) |
| 49 | |
| 50 | bug / debug / debugging |
| 51 | → superpowers (systematic-debugging) |
| 52 | |
| 53 | code review |
| 54 | → superpowers (requesting-code-review) |
| 55 | |
| 56 | plan / task breakdown / planning |
| 57 | → planning-with-files |
| 58 | |
| 59 | create Skill / codify workflow |
| 60 | → skill-creator |
| 61 | |
| 62 | capture experience / lessons learned / knowledge extraction |
| 63 | → claudeception |
| 64 | |
| 65 | frontend / UI / component |
| 66 | → frontend-design |
| 67 | |
| 68 | design / poster / chart |
| 69 | → canvas-design |
| 70 | ``` |
| 71 | |
| 72 | ### Output Format |
| 73 | |
| 74 | ``` |
| 75 | ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ |
| 76 | 🧭 Skill Recommendation |
| 77 | ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ |
| 78 | |
| 79 | Scenario: "your described scenario" |
| 80 | |
| 81 | Recommended Skill: |
| 82 | ✅ skill-name — description |
| 83 | Invoke: "trigger keyword or command" |
| 84 | |
| 85 | Alternatives: |
| 86 | ✅ alt-skill — description |
| 87 | |
| 88 | Status legend: |
| 89 | ✅ = Installed ❌ = Not installed ⚠️ = Needs configuration |
| 90 | ``` |
| 91 | |
| 92 | If the recommended Skill is not installed: |
| 93 | |
| 94 | ``` |
| 95 | ❌ skill-name is not installed |
| 96 | |
| 97 | Installation: |
| 98 | Option A (Bundled): ln -sf ~/.claude/skills/harness-en/bundled-skills/skill-name ~/.claude/skills/skill-name |
| 99 | Option B (Git): cd ~/.claude/skills/ && git clone <url> skill-name |
| 100 | ``` |
| 101 | |
| 102 | --- |
| 103 | |
| 104 | ## No Scenario: Display Full Guide |
| 105 | |
| 106 | Read `references/skill-guide.md` for the 4 categories + decision tree, combined with installation status. |