Ohmyharness — DevOps skill for Claude Code
Run any coding agent in a Docker sandbox with your rules, skills and MCP servers already inside.
How to install Ohmyharness
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open mindsers/ohmyharness and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Ohmyharness does
Run any coding agent in a Docker sandbox with your rules, skills and MCP servers already inside. Git worktree isolation, editor attach over SSH, live code graph.
Alternatives in DevOps
- Context Infrastructure — A context and memory system for AI coding agents 774 ★
- MCP SSH Manager — MCP SSH Server: 37 tools for remote SSH management Claude Code & OpenAI Codex DevOps automation, backups, data 460 ★
- Deploy Status — SSH to 2anki.net, show pm2 status and recent server log tail 324 ★
README
omh — the safe way to run an agent against your repo
A sandboxed session, your setup already in it, and a branch you can review.
[](https://github.com/mindsers/ohmyharness/actions/workflows/ci.yml) [](https://github.com/mindsers/ohmyharness/releases) [](LICENSE)
$ omh init # detects your stack, decides, reports. no questions.
$ omh new claude # sandboxed, curated, your setup already inside
$ omh sessions attach # open that same session in your editor
$ omh graph # browse your codebase as a graph
**Status: early, and one harness deep.** `0.8.0`. **Claude Code is the only harness anyone has done real work through.** `opencode` and `omp` pass `omh doctor`, which proves their paths are right and nothing whatever about their behaviour — so *declare once, switch harness* is the shape the architecture is built for and not yet a thing anybody has done.
What is verified is the loop below: a sandboxed session with your config already inside it, and a branch you can read before it touches your checkout. This release closes the two silent failures that would have got worse with every user — two checkouts of the same name no longer share sessions, and the carried-file scan now says what it could not read — and adds [`omh eject`](docs/commands.md#omh-eject-harness---to-dir), which writes the config out and steps aside.
[What isn't done](#what-isnt-done) is a real list, not a modesty ritual.
What you actually get
Running `omh new claude` instead of `claude` buys five things:
**A sandbox that protects your repo, not just your host.** The agent works in a git worktree on its own branch. Your checkout is never mounted. Review with `omh sessions diff`, ship with `omh sessions commit` and `omh sess
Related Skills
Claude Safe
Sandboxed Claude Code launcher — runs Claude in Docker with tmux session management and git worktree isolation
Hort
Sandbox any CLI AI agent so it runs unrestricted without touching your machine. Written in Rust, daemonless, n
Sandbox Shell
macOS Seatbelt sandbox CLI for developers. Protect credentials (SSH, AWS, GPG) from malicious npm packages, su
TerminalOs
macOS terminal that runs your servers — SSH, Docker, live metrics, SFTP and keys over one connection per host,
LiteEditorAI
Terminal-first workspace for supervising AI coding agents (Claude Code, Codex, Gemini): live agent status per
Cleat
Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permiss
Related Agents
Plan Rollout Coder
Coding sub-agent for a plan-rollout run. Builds or fixes one PR (or a slice branch cut from it) inside a workt
Delforge DevOps Engineer
Use for DevOps and infrastructure tasks — Docker, Docker Compose, CI/CD, GitHub Actions, build systems, and de
Docker Sandbox
Isolated autonomous scanning agent — runs in a temporary worktree with restricted Bash access. Requires ROE au