---
title: "Harness detail"
method: GET
path: "/repos/{owner}/{repo}/harness"
---

# Harness detail

`GET /repos/{owner}/{repo}/harness`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/repos/{owner}/{repo}/harness`
- Auth: none declared

## Path parameters

- `owner` string, required
- `repo` string, required

## Response `200`

Harness manifest, trust signals, examples, files and review preview

- HarnessDetail
  - `owner` string
  - `repo` string
  - `manifest` object
  - `valid` boolean
  - `issues` object[]
  - `risk` object
  - `security` SecurityReport
    - `verdict` 'pass' | 'warn' | 'fail'
    - `scanner` string
    - `findings` object[]
  - `contextCost` ContextCost: Deterministic estimate from markdown instruction files. It is not a measured LLM bill.
    - `approxTokens` number, required
    - `files` number, required
    - `bytes` number, required
    - `status` 'estimated', required
  - `standard` 'conformant' | 'partial'
  - `evalResult` object
  - `verification` object
    - `lastVerifiedAt` string, date-time
  - `nativeInstall` NativeHarnessInstall: Exact anonymous native-harness install tuple. It is local catalog evidence, not managed approval or a Verified badge.
    - `kind` 'native_harness', required
    - `resourceId` string, required
    - `ref` string, required
    - `version` string, required
    - `artifactDigest` string, required
    - `snapshot` true, required
    - `totalFileCount` integer, required
    - `archiveTruncated` false, required
    - `securityScan` 'pass', required
    - `scanner` 'static-v2', required
    - `scannedArtifactDigest` string, required
    - `riskTier` string, required
    - `permissions` object, required
    - `license` string, required
    - `managedApproval` false, required
    - `archiveUrl` string, uri, required
    - `commands` object, required
      - `codex` string, required
      - `claudeCode` string, required
  - `example` object
  - `files` string[]
  - `versions` ArchiveVersion[]
    - `version` string, required
    - `createdAt` string, date-time, required
    - `snapshot` boolean, required
    - `current` boolean, required
    - `fileCount` number, required
  - `prReview` MaintainerReviewPreview: Generated local maintainer-review preview. It is not evidence of an open forge pull request when demo=true.
    - `owner` string, required
    - `repo` string, required
    - `number` integer, nullable, required
    - `title` string, required
    - `source` 'local-demo' | 'forge-pr', required
    - `demo` boolean, required
    - `status` 'passed' | 'review' | 'failed', required
    - `markdown` string, required
    - `next` string, required
    - `diff` object, required
      - `riskDelta` number, required
      - `riskTier` string, required
      - `changes` object[], required
        - `severity` string, required
        - `area` string, required
        - `message` string, required
  - `readme` string

## Other responses

- `401`: Authorization required
- `403`: Authorization was provided but is not allowed for this action
- `404`: Resource not found

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)