Brutal Hardening Orchestration Agent

VerifiedSafe

Orchestrates subsystem-by-subsystem project hardening by alternating deep review with automated task execution. Each subsystem is reviewed, CRITICAL/MAJOR tasks are created and fully executed before moving to the next, and passes repeat until no new major issues are found. Helps when you need systematic, autonomous hardening with no instruction loss.

Sby Skills Guide Bot
DevelopmentAdvanced
6/2/2026
Claude CodeCodex
#subsystem-review#task-orchestration#code-hardening#autonomous-loop

Recommended for

Automated summary

Orchestrates a strict review-and-execution loop that applies brutal-project-review to each subsystem and runs all resulting tasks via task-worker, continuing passes until no new critical or major issues are found.

Strengths

  • Ensures no instructions from source skills are dropped
  • Autonomous multi-pass process that deepens refinement
  • Resumes safely by draining existing tasks first
  • Integrates project target context from TARGET.md

Limitations

  • Limited to projects with clearly defined subsystems
  • Requires both brutal-project-review and task-worker skills to be available
  • Loop may be time-consuming for large codebases
When to use it

Use when you need thorough, autonomous improvement of a project through iterative review and task execution until no major issues remain.

When not to use it

Avoid when you need a quick fix or when the project lacks clear subsystem boundaries.

Security analysis

Safe
Quality score90/100

The skill is an orchestrator that reads two other skill files and loops subsystem reviews and task execution. It only uses safe Bash commands (ls, find, wc, date, git, ./run, mkdir, rm, cat, mv) and standard editing tools. There are no instructions for destructive actions, exfiltration, or disabling safety. The rm tool is allowed but not explicitly invoked with dangerous patterns; cleanup is left to invoked skills. No network access is requested. The orchestrator itself is passive and does not execute user-provided code.

No concerns found

How this analysis is made

Examples

Full project hardening
Apply the brutal-agent to systematically review all subsystems and execute tasks until no critical issues remain.
Resume incomplete review
Run a brutal-agent pass on my project, checking TARGET.md first and draining any existing tasks.
Multi-pass subsystem review
Use the brutal-agent loop to harden the codebase, ensuring each subsystem is reviewed and tasks are completed.

name: brutal-agent description: "Orchestrate subsystem-by-subsystem project hardening by combining brutal-project-review and task-worker in a strict loop: review one subsystem, create CRITICAL/MAJOR tasks, run all tasks to completion, then move to the next subsystem. Continue full review/task passes until a complete pass finds no new CRITICAL/MAJOR issues. Use when the user wants both deep subsystem review and autonomous task execution with no instruction loss." allowed-tools: Bash(ls:), Bash(find:), Bash(wc:), Bash(date:), Bash(git:), Bash(./run:), Bash(mkdir:), Bash(rm:), Bash(cat:), Bash(mv:), Task, Read, Write, Edit, Grep, Glob

Run a strict orchestration loop that combines these two skills without dropping any instructions:

  • /home/user/.codex/skills/brutal-project-review/SKILL.md
  • /home/user/.codex/skills/task-worker/SKILL.md

Non-Negotiable Inheritance Rules

  1. Read both source SKILL.md files in full before starting.
  2. Treat every instruction in both source files as authoritative and preserved.
  3. Do not summarize away, simplify, or omit any requirement from either source skill.
  4. Only add orchestration logic for ordering. If there is tension, preserve source-skill behavior and use this skill only to decide sequence.

Orchestration Workflow

Step 0: Load Source Skills

  • Read:
    • /home/user/.codex/skills/brutal-project-review/SKILL.md
    • /home/user/.codex/skills/task-worker/SKILL.md
  • Keep their instructions active for the rest of execution.

Step 0.5: Load Project Target Context (Before Feature Planning)

  • Before planning any feature work, check for TARGET.md in the project root directory.
  • If TARGET.md exists, read it in full and treat it as required planning context.
  • Do not start feature planning until this check/read has been completed.

Step 1: Drain Existing Tasks First (Resume Safety)

  • If any task exists in either:
    • workspace/tasks/in-progress/
    • workspace/tasks/todo/
  • Run task-worker exactly as specified, until it reports no more tasks.
  • This prevents reviewing additional subsystems while previous findings remain unaddressed.

Step 1.5: Initialize Pass Tracking

  • Define a "pass" as reviewing all currently discovered subsystems to done once.
  • Read .claude/review-state/manifest.json and record:
    • pass_started_at
    • pass_baseline_tasks_created = len(tasks_created) (use 0 if manifest does not yet exist)
  • Use this baseline to determine whether the pass discovered any new CRITICAL/MAJOR issues.

Step 2: Review One Subsystem

  • Run brutal-project-review exactly as specified.
  • Execute one full subsystem cycle (including report, task creation, manifest update, completion marking, and cleanup) for the next pending subsystem.

Step 3: Run All Tasks to Completion

  • Immediately run task-worker exactly as specified.
  • Let it process continuously until both are empty:
    • workspace/tasks/todo/
    • workspace/tasks/in-progress/
  • Respect all TDD, self-review, fix-loop, verification, state, and lifecycle requirements from task-worker.

Step 4: Loop Control

  • Check brutal-project-review manifest state.
  • If any subsystem remains pending, go back to Step 2.
  • If all subsystems are done:
    • Compute pass_new_tasks = len(tasks_created) - pass_baseline_tasks_created.
    • If pass_new_tasks > 0, start another pass:
      • Reinitialize pass tracking (Step 1.5)
      • Go back to Step 2
    • If pass_new_tasks == 0, go to Step 5.

Step 5: Final Drain and Completion Report

  • Run one final task-worker pass to ensure no residual tasks remain.
  • Stop only when this condition is true:
    • Last complete pass produced pass_new_tasks == 0 (no new CRITICAL/MAJOR issues found)
  • Report completion summary:
    • Passes executed
    • New CRITICAL/MAJOR tasks created in last pass (0)
    • Subsystems reviewed (done/total)
    • Remaining tasks (must be zero unless explicitly blocked/needs-human-review)
    • Any blocked or needs-human-review tasks

Execution Contract

When this skill says “run brutal-project-review” or “run task-worker”, it means:

  • Apply the full, original instructions from each referenced source skill.
  • Preserve all required formats, severity definitions, state handling, history updates, commits, and review rigor.
  • Preserve all resume logic and guardrails from both skills.

This skill only defines the macro-ordering loop:

  1. Review one subsystem
  2. Run all tasks
  3. When a full pass completes, repeat passes until no new CRITICAL/MAJOR tasks are created

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/brutal-hardening-orchestration-agent-mm78nno5/download' --output '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md.part' && mv '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md.part' '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

Tools declared by the author (check availability in your agent): Bash(ls:*), Bash(find:*), Bash(wc:*), Bash(date:*), Bash(git:*), Bash(./run:*), Bash(mkdir:*), Bash(rm:*), Bash(cat:*), Bash(mv:*), Task, Read, Write, Edit, Grep, Glob

No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.

Claude Code
test -f '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md' && test -s '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/brutal-agent' && cp -R '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5' '.claude/skills/brutal-agent'

Codex
test -f '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md' && test -s '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md' && mkdir -p '.agents/skills' && test ! -e '.agents/skills/brutal-agent' && cp -R '.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5' '.agents/skills/brutal-agent'

OpenSkills

OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.

Official OpenSkills installation
openskills install './.skill-downloads/brutal-hardening-orchestration-agent-mm78nno5'

openskills read 'brutal-hardening-orchestration-agent-mm78nno5'

Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.

For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.

openskills sync

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/brutal-hardening-orchestration-agent-mm78nno5/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.

Related skills