unharden

Restore secrets files and wrappers to the agent uid and remove the broker binary.

Updated Feb 25, 2026

Search Tags:#project recovery #unharden #secrets boundary #os-level security #broker binary

Ready to run

npx skills add https://github.com/thomfilg/ai-plugin-work --skill unharden

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: unharden
Source: https://github.com/thomfilg/ai-plugin-work/tree/main/plugins/heimdall/skills/unharden
Command: npx skills add https://github.com/thomfilg/ai-plugin-work --skill unharden

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

The Skill addresses the need to undo the OS-level secrets boundary for a project, which involves restoring the secrets file/wrapper to the agent uid and removing the broker binary. This is useful when the user wants to "unharden" or revert the secrets safe, remove the secrets boundary, or undo the secrets lock.

Core Features & Use Cases

Undo Secrets Boundary: Reverts the secrets file and wrapper to the agent uid.
Remove Broker Binary: Removes the broker binary associated with the secrets boundary.
User Initiated: Only runs with user authorization, requiring sudo privileges.
No Runner User Deletion or .mcp.json Restoration: Does not delete the runner user or restore the .mcp.json file.

Quick Start

Run the 'unharden' skill by providing the repository directory as an argument: unharden [repo-dir].

Frequently Asked Questions about unharden

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I revert an OS-level secrets boundary in my project?▼

To revert an OS-level secrets boundary, you use the unharden skill to restore secrets files and wrappers to the agent uid and remove the broker binary. You execute it manually with sudo access by providing the repository directory as an argument.

Do I need sudo access to remove the broker binary and unharden my project?▼

Yes, you need sudo access to unharden your project because the skill requires user authorization to remove the broker binary and restore the OS-level secrets boundary. It is designed to only run with explicit user initiation.

What does unharden leave untouched when reverting the secrets boundary?▼

Unharden leaves the runner user and the .mcp.json file untouched when reverting the secrets boundary. It strictly focuses on restoring the secrets file and wrapper to the agent uid while removing the broker binary.

How to restore secrets files and wrappers to the agent uid?▼

You restore secrets files and wrappers to the agent uid by running the unharden skill with the target repository directory as an argument. This process reverses the hardened state by shifting file ownership back from the OS-level boundary.

When should I undo the secrets lock on my project?▼

You should undo the secrets lock when you need to revert a hardened state and remove the OS-level secrets boundary for project recovery. This is useful when the broker binary is no longer needed and secrets must be restored to the agent uid.