Open Source Hardening Skills
English | 中文
Open Source Hardening Skills is a skill pack for ARIS / Claude Code that hardens any repository - app, library, CLI tool, or research paper codebase - into a readable, testable, maintainable open-source project.
Pairs naturally with ARIS. ARIS (v0.3+) is a multi-IDE autonomous research ecosystem with 31+ skills supporting Claude Code, Codex CLI, Cursor, Trae, and more. Open Source Hardening Skills is the next step that gets the resulting code ready for public release.
Workflow
[ARIS research pipeline] [Open Source Hardening Skills pipeline]
/idea-discovery /oss-audit -> scan for gaps
/auto-review-loop ------> /oss-plan -> make a checklist
/paper-writing /oss-refactor -> minimal cleanup
(code exists) /oss-tests -> add CI-safe tests
/oss-ci -> block bad PRs
/oss-docs -> polish docs
/oss-review-loop -> external quality gate
(repo is release-ready)
Open Source Hardening Skills also works standalone on any existing repository - no ARIS required.
Skills
| Skill | Trigger | What it does |
|---|
| oss-audit | /oss-audit | Scans 7 dimensions, outputs a prioritized file-level report (OSS_AUDIT.md) |
| oss-plan | /oss-plan | Converts audit findings into a PR-ready checklist (OSS_PLAN.md) |
| oss-refactor | /oss-refactor | Applies the smallest structural changes needed to unlock tests and CI |
| oss-tests | /oss-tests | Builds a minimal automated test loop that runs without secrets |
| oss-ci | /oss-ci | Adds or improves a GitHub Actions pipeline that blocks broken PRs |
| oss-docs | /oss-docs | Polishes README, adds SECURITY.md, CHANGELOG.md, and contribution guidance |
| oss-review | /oss-review | One-shot external review via Codex MCP (GPT-5.4) |
| oss-review-loop | /oss-review-loop | Iterative review -> fix -> re-review until release-ready (max 4 rounds) |
| oss-hardening | /oss-hardening | Orchestrates the full pipeline end-to-end in one command |
| oss-search | /oss-search | Searches GitHub and the web for reference repos, CI examples, and best practices - no API keys required |
Install
1. Install and initialize Claude Code
Install Claude Code first, then open it once to finish login and create ~/.claude/:
# macOS / Linux / WSL
curl -fsSL https://claude.ai/install.sh | bash
# Windows PowerShell
irm https://claude.ai/install.ps1 | iex
cd your-project
claude
2. Install the skills
macOS / Linux / WSL (one-liner):
curl -fsSL https://raw.githubusercontent.com/zeyuzhangzyz/open-source-hardening-skills/main/install.sh | bash
Or clone and run manually:
git clone https://github.com/zeyuzhangzyz/open-source-hardening-skills.git
cd open-source-hardening-skills
bash install.sh
Windows PowerShell (one-liner):
irm https://raw.githubusercontent.com/zeyuzhangzyz/open-source-hardening-skills/main/install.ps1 | iex
Or clone and run manually:
git clone https://github.com/zeyuzhangzyz/open-source-hardening-skills.git
cd open-source-hardening-skills
.\install.ps1
The install scripts are idempotent: re-running them updates the skills to the latest version. They only replace this pack's own oss-* skill directories and never touch other skills you may have installed.
3. Optional: set up Codex for review skills
/oss-review and /oss-review-loop call the external reviewer via the official Codex MCP tools (mcp__codex__codex, mcp__codex__codex-reply). The other 8 skills work without it.
npm install -g @openai/codex
codex setup # set model to gpt-5.4 when prompted
claude mcp add codex -s user -- codex mcp-server
Tip: ARIS v0.3+ also ships alternative review bridges (Claude, Gemini, any OpenAI-compatible API). If you already have one configured, /oss-review will use whichever Codex MCP endpoint is available.
4. Run in your target repository
/oss-hardening .
After a full run, the pipeline generates these artifacts in your repo root:
OSS_AUDIT.md <- gap analysis across 7 dimensions
OSS_PLAN.md <- PR-ready checklist with acceptance criteria
OSS_REFACTOR.md <- summary of structural changes applied
OSS_TEST_STRATEGY.md <- test framework, commands, and mock strategy
OSS_CI.md <- CI workflow documentation
OSS_DOCS.md <- documentation improvement checklist
OSS_REVIEW_LOOP.md <- iterative review log with scores per round
OSS_HARDENING_STATUS.md <- final verdict, score, and next steps
