
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
MicroHard: A modular meta-framework for intelligent operational ecosystems (CAI, MGI, and more).
CAI (Client Acquisition Intelligence) + MGI (Meta-General Intelligence)
A step-driven workflow engine with cross-session persistence and intelligent agent orchestration.
MicroHard is a meta-framework for AI-driven workflows that combines:
Unlike traditional single-session AI tools, MicroHard provides cross-session persistence, step-based workflows, and intelligent knowledge libraries that work across days and weeks.
--loop flag returns to checkpoint for iterative refinement--step <id> jumps to any step in exploratory workflowsPackage: microhard on npm
Prerequisites: Node.js v20+
npx microhard install
Or install globally if you'll use it across many projects:
npm install -g microhard
microhard install
The installer will guide you to:
.claude/skills/, .gemini/skills/, .github/skills/📖 Full installation guide: INSTALLATION.md
# Clone repository
git clone <repository>
cd MicroHard
# Install dependencies
npm install
# Run quality checks
npm run quality
# Validate skills
npm run validate:strict
# Install skills locally
node tools/installer/microhard-cli.js install
MicroHard includes built-in quality control for AI-generated code:
npm run quality # Check all code quality
npm run quality:fix # Auto-fix issues
Pre-commit hooks automatically run before each commit. See docs/QUALITY-CONTROL.md for details.
After installation, skills are available as slash commands in your AI IDE:
/mgi-theory-practitioner
/mgi-adversarial-designer
/cai-hook-engineer
/cai-content-architect
In Claude Code / Gemini CLI / Copilot:
You: /mgi-theory-practitioner
AI: I'm the MGI Theory Practitioner. I'll help you select and apply
the right mental model to your problem.
Please describe the problem you're trying to solve.
You: I need to improve my SaaS pricing strategy.
AI: [Loads mental models library and suggests relevant frameworks...]
# View progress across all skills
microhard status
# Run a skill (show current step)
microhard run cai-hook-engineer
# Mark step done and advance
microhard run cai-hook-engineer --next
# For iterative workflows, loop back to refine
microhard run mgi-adversarial-designer --loop
# For exploratory workflows, jump to any step
microhard run mgi-cross-domain-synthesizer --step step-03-synthesis
# Rebuild mental models index
microhard library index
📖 See: docs/SLASH-COMMANDS-REFERENCE.md for all 24 skills
Architecture & Design:
Skills Reference:
src/
├── cai-skills/ # Client Acquisition Intelligence (18 skills)
│ ├── 1-attract/ # Hook engineering, content architecture
│ ├── 2-convert/ # Ad creative, landing pages
│ ├── 3-scale/ # Growth optimization, A/B testing
│ └── 4-optimize/ # Feedback, compliance, CEO reporting
│
├── mgi-skills/ # Meta-General Intelligence (6 skills)
│ ├── 1-distillation/ # Theory practitioner, knowledge curator
│ ├── 2-stress-test/ # Adversarial designer, first principles
│ ├── 3-synthesis/ # Cross-domain synthesis, system auditor
│ └── _library/ # Mental models library (99 models + index)
│
├── cai-workflows/ # Multi-skill orchestration workflows
└── templates/ # Client project boilerplates
tools/
├── engine/ # Workflow execution engine
│ ├── workflow-runner.js # Step orchestration, loop/navigation
│ ├── state-manager.js # Cross-session persistence
│ └── registry-reader.js # Skill resolution
│
├── installer/ # Installation and CLI
│ └── microhard-cli.js # Main CLI interface
│
└── library/ # Library management
└── build-model-index.js # Mental models index generator
| Type | Description | Example Skills | Use Case |
|---|---|---|---|
| Linear | Sequential steps, executed in order | All CAI skills, mgi-knowledge-curator | Standard workflows with clear prerequisites |
| Selection | Choose from library, then apply | mgi-theory-practitioner | Select the right tool, then use it |
| Iterative | Loop until quality threshold met | mgi-adversarial-designer, mgi-first-principles-deconstructor | Refinement cycles with checkpoints |
| Exploratory | Non-linear, jump between steps | mgi-cross-domain-synthesizer | Discovery-driven workflows |
| Skill | Type | Purpose |
|---|---|---|
| Theory Practitioner | Selection | Apply mental models from library to real problems |
| Adversarial Designer | Iterative | Attack plans, audit attacks, harden against them |
| First Principles Deconstructor | Iterative | Strip to axioms, rebuild from ground truth |
| Cross-Domain Synthesizer | Exploratory | Transfer insights across unrelated domains |
| System Auditor | Iterative | Audit systems with domain-specific lenses |
| Knowledge Curator | Linear | Ingest raw material into mental models library |
Phase 1 — Attract:
Phase 2 — Convert:
Phase 3 — Scale:
Phase 4 — Optimize:
✅ Phase 1 Complete: Library Index Generator (99 models indexed)
✅ Phase 2 Complete: Data Injection Layer (11 data folders)
✅ Phase 3 Complete: Workflow Type System (4 types implemented)
✅ Phase 4 Complete: MGI Skill Redesigns (all 6 skills updated)
See IMPLEMENTATION-STATUS.md for detailed progress tracking.
MicroHard is built for extensibility. To contribute:
node tools/validate-skills.js before submittingMIT License — Built with 🧠 for systematic architects and strategic thinkers.
MicroHard Meta-Framework
Where intelligence meets execution.
FAQs
MicroHard: AI-native org chart. A fractional C-suite in a CLI — CEO, CTO, CMO, COO departments with 60+ skills and cross-session memory.
The npm package microhard receives a total of 20 weekly downloads. As such, microhard popularity was classified as not popular.
We found that microhard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.