Scans git-tracked (public) files for operator-private tokens that should live only in gitignored files — real usernames, absolute home paths, companion-store names, company asset names. Reports file:line + matched token + severity, so a public/private split stays clean before publish.
安装
npx skills add chrono-meta/forge-harness --skill public-surface-auditnpx skills add chrono-meta/forge-harness --skill public-surface-audit -a claude-code -gnpx skills add chrono-meta/forge-harness --skill public-surface-audit -a codex -ggemini skills install https://github.com/chrono-meta/forge-harness.git --path plugins/fh-meta/skills/public-surface-auditgh skill install chrono-meta/forge-harness public-surface-auditgit clone --depth 1 https://github.com/chrono-meta/forge-harness /tmp/chrono-meta__forge-harness
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/chrono-meta__forge-harness/plugins/fh-meta/skills/public-surface-audit ~/.claude/skills/public-surface-audit # Claude Code
cp -R /tmp/chrono-meta__forge-harness/plugins/fh-meta/skills/public-surface-audit ~/.agents/skills/public-surface-audit # Codex, Cursor, Gemini CLI, Copilot, OpenCode