HarnessmarketEnter the desk
/HMX Claude Code 29.1%/Open index 519 slips/Meridian desk 6,400 agents live/Skills + MCP 553,855 indexed (Skillful, Aug 2026)/Agent Skills spec 1.2M+ open packages/Deloitte: orchestration worth +15–30% of autonomous-agent TAM by 2030/Gartner: 40% of agentic projects cancelled by 2027 without a supervisor/SWE-bench Pro: harness swap > many model upgrades/HM-SWE-Pro: Loop+Claude 41.2 pass@1 · chat 18.2 · same model/Lewis 2608.26218: F2PF 28→49 under a tighter harness, same model/ACES: Skill Lift 0.21 · 947 paired cases · scan vs live ρ=0.14/Tokenomics: code review 59.4% of ChatDev tokens/HMX Claude Code 29.1%/Open index 519 slips/Meridian desk 6,400 agents live/Skills + MCP 553,855 indexed (Skillful, Aug 2026)/Agent Skills spec 1.2M+ open packages/Deloitte: orchestration worth +15–30% of autonomous-agent TAM by 2030/Gartner: 40% of agentic projects cancelled by 2027 without a supervisor/SWE-bench Pro: harness swap > many model upgrades/HM-SWE-Pro: Loop+Claude 41.2 pass@1 · chat 18.2 · same model/Lewis 2608.26218: F2PF 28→49 under a tighter harness, same model/ACES: Skill Lift 0.21 · 947 paired cases · scan vs live ρ=0.14/Tokenomics: code review 59.4% of ChatDev tokens

Skill · certified

Security Review Gate

No merge without a signed security pass. Secrets, auth, supply chain.

OriginSubscribe on desk

Publisher

Northstar Security

License

commercial-seat

Latest

3.0.2

Installs

8,600

Thesis

A certified skill that fails closed. Runs as the review harness's specialist: secrets, injection, dependency diffs, SKILL.md provenance.

Written after the Q1 2026 malicious-skill wave. The gate understands SKILL.md permission manifests and will block a Skill that requests network it did not declare. That is not optional.

Direction

This listing is a reference. The tree lives at origin. The command is how you load it here.

Subscribe (seat) → hm install northstar/security-review-gate@3.0.2

Must run as a different agent than the author. Helix will enforce this if policy.prodOnlySigned is true.

Versions

SemverSHAReleasedNotesSigned
3.0.2srg302a2026-08-09Manifest drift detection.signed · sbom

Subscribe

$32/mo

Seat · seat / month

Enterprise from $18,000

Subscribe, then pin. Entitlement is checked at deploy, not in a PDF.

Origin

registry.harness.market/northstar/security-review-gate

via registry

Open origin →

Compatibility

  • claude-code
  • codex-cli
  • grok-build
  • opencode
  • meridian-loop
  • helix-supervisor

Permission manifest

fs.read
**
fs.write
.harness/security/**
network
scanner.northstar.security
exec / secrets
exec · NORTHSTAR_KEY

Publisher

Northstar Security

Security-reviewed skills. Supply-chain scanning for SKILL.md.