service-deploy

30 / 100 · High risk

Only if you trust the author. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By Flow-Research/harnessy (GitHub) · devops · 30 stars · scanned at commit bae3fdd

Plan, package, verify, deploy, inspect, and roll back services using Harnessy CI/deploy profiles with Hostinger as the first provider adapter.

Works with any agent that supports SKILL.md skills.

What this skill can do

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README. Expected for a devops skill.

Found in 2 places.

tools/flow-install/skills/service-deploy/commands/service-deploy.md, line 96harness-deploy ssh-setup --ssh-public-key ~/.ssh/id_ed25519.pub
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 616return Path("~/.ssh/id_rsa.pub").expanduser()

Downloads and installs other software

The author does not mention this. Expected for a devops skill.

Found in 5 places.

tools/flow-install/skills/service-deploy/manifest.yaml, line 42fallback: "npm install -g hostinger-api-mcp"
tools/flow-install/skills/service-deploy/manifest.yaml, line 49fallback: "npm install -g hostinger-api-mcp"
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 560apt-get install -y sudo

Show 2 more

tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1044apt-get install -y ca-certificates curl nginx
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1047curl -LsSf https://astral.sh/uv/install.sh | sh

Changes files outside its own folder

The author does not mention this.

Found in 9 places.

tools/flow-install/skills/service-deploy/manifest.yaml, line 56darwin: 'mkdir -p "$HOME/.local/bin" && tmp="$(mktemp -d)" && git clone --depth 1 https://github.com/hostinger/api-cli "$tmp/api-cli" && (cd "$tmp/api-cli" && g
tools/flow-install/skills/service-deploy/manifest.yaml, line 57linux: 'mkdir -p "$HOME/.local/bin" && tmp="$(mktemp -d)" && git clone --depth 1 https://github.com/hostinger/api-cli "$tmp/api-cli" && (cd "$tmp/api-cli" && go
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 562printf '%s ALL=(root) NOPASSWD: ALL\n' "$deploy_user" >/etc/sudoers.d/harnessy-deploy

Show 6 more

tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1048install -m 0755 /root/.local/bin/uv /usr/local/bin/uv
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1055mkdir -p "$release" /opt/econ-sim/releases /etc/econ-sim /var/lib/econ-sim /var/cache/econ-sim /var/log/econ-sim
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1065install -m 0644 deploy/systemd/econ-sim.service /etc/systemd/system/econ-sim.service
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1066install -m 0644 deploy/nginx/econ-sim.conf /etc/nginx/sites-available/econ-sim
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1067rm -f /etc/nginx/sites-enabled/default
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1068ln -sfn /etc/nginx/sites-available/econ-sim /etc/nginx/sites-enabled/econ-sim

Sends data to these websites: astral.sh

The author does not mention this. Expected for a devops skill.

Found in 7 places.

tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 20import urllib.request
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 343request = urllib.request.Request(
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 355with urllib.request.urlopen(request, timeout=30) as response:

Show 4 more

tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 984with urllib.request.urlopen(url, timeout=timeout) as response:
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1047curl -LsSf https://astral.sh/uv/install.sh | sh
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1079curl -fsS http://127.0.0.1:8501/_stcore/health >/tmp/econ-sim-streamlit-health.txt
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 1080curl -fsS http://127.0.0.1:{shlex.quote(str(public_port))}/_stcore/health >/tmp/econ-sim-nginx-health.txt

Runs commands on your computer

The author does not mention this. Expected for a devops skill.

Found in 4 places.

tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 237result = subprocess.run(command, shell=True, text=True, capture_output=True, check=False)
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 414) -> subprocess.CompletedProcess[str]:
tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 415return subprocess.run(command, input=stdin, text=True, capture_output=True, check=False, timeout=timeout, env=env)

Show 1 more

tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 822result = subprocess.run(command, text=True, capture_output=True, check=False, env=env)

Contains code that is hidden or hard to read

The author does not mention this.

Found in 1 place.

tools/flow-install/skills/service-deploy/scripts/harness-deploy, line 430return f"printf %s {shlex.quote(encoded)} | base64 -d | bash"

Safer alternatives

Low-risk skills in the same category (devops) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'service-deploy' ] || [ -L ~/.agents/skills/'service-deploy' ]; then echo 'A skill folder named service-deploy already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/Flow-Research/harnessy' "$d" && git -C "$d" checkout --quiet 'bae3fdddd99eabe649d0d53cea5d2a0b501aa8b3' -- 'tools/flow-install/skills/service-deploy' && mkdir -p ~/.agents/skills && cp -R "$d"/'tools/flow-install/skills/service-deploy' ~/.agents/skills/'service-deploy' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'service-deploy' ~/.claude/skills/'service-deploy' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for Flow-Research/harnessy shows the score of its lowest-scoring skill.

SkillTrust badge for Flow-Research/harnessy

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/Flow-Research/harnessy.svg)](https://zalavijaysinh.github.io/skilltrust/repos/Flow-Research/harnessy/)

Score history

Date	Version	Score
2026-11-08	`bae3fdd`	30