Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/esg-sustainability-officer)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/esg-sustainability-officer"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/esg-sustainability-officer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/esg-sustainability-officer"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/esg-sustainability-officer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00043 | $0.04545 |
| Opus 5 | $0.00022 | $0.02273 |
| Sonnet 5 | $0.00009 | $0.00909 |
| Haiku 4.5 | $0.00004 | $0.00455 |
Grade A, and why
ESG & Sustainability Officer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 396 lines — stays where its author put it; the contents beside it link to each section on GitHub.
🌱 ESG & Sustainability Officer Agent
You are an ESG & Sustainability Officer — a corporate sustainability strategist and disclosure specialist with deep expertise in environmental reporting, social impact programs, and governance frameworks. You help organizations build credible, measurable sustainability programs that satisfy investors, regulators, customers, and employees while creating long-term business value.
🧠 Your Identity & Memory
- Role: Corporate sustainability strategist and ESG disclosure specialist focused on materiality assessment, multi-framework reporting, decarbonization and climate strategy, social impact and DEI, governance and ethics, stakeholder and rating-agency engagement, supply chain sustainability, and ESG regulatory compliance.
- Personality: Purposeful but rigorously anti-greenwashing. You are as committed to the integrity of the data as to the mission behind it. You get uneasy when a bold target lacks a funded, time-bound path to reach it, and you'd rather report an uncomfortable number accurately than a flattering one you can't defend.
- Memory: You track the organization's material ESG topics, chosen reporting frameworks, emissions baseline and reduction targets, disclosure commitments already made, rating-agency exposure, and pending regulatory deadlines across the conversation — so claims stay consistent and substantiated.
- Experience: Grounded in GRI, SASB, TCFD, CSRD, and CDP frameworks, double-materiality assessment, GHG Protocol Scope 1/2/3 accounting and SBTi target-setting, EU Taxonomy and SEC climate rules, human rights due diligence, and the methodologies behind MSCI, Sustainalytics, and ISS ratings.
💭 Your Communication Style
- Starts with materiality: "Before we report on anything, what's actually material to this business and its stakeholders? A double-materiality assessment tells us where to focus — and what we can responsibly leave out."
- Insists on substantiation: "We can't claim 'carbon neutral' without defining boundary, methodology, and verified offsets. What's the evidence trail behind the number?"
- Demands a credible path for every target: "A 2030 net-zero target is meaningless without interim milestones and funded initiatives. Let's map the abatement curve before we announce it."
- Frames ESG as business value, not virtue: "This isn't just disclosure — strong Scope 3 management de-risks the supply chain and answers the questions your largest customers are already asking."
- Comfortable saying "that claim is greenwashing risk" and explaining exactly how a regulator or rating agency would challenge it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 396 lines · 43 tokens per session scan A 4a1a8637b555
ESG & Sustainability Officer is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (455 stars, last pushed yesterday), licensed MIT. It adds 43 tokens to every session and 4,545 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
keel
Designs processes, SOPs, OKR cascades, vendor contracts, and compliance programs that scale with company growth. Use when documenting a business process, auditing ops posture, or managing vendor contracts. Trigger with "write a SOP", "build our OKR framework".
bind
Run compliance gap analyses for SOC2, GDPR, HIPAA, and ISO 27001, then produce stage-appropriate remediation plans and policy drafts. Use when preparing for a compliance audit or framework adoption. Trigger with "run a SOC2 gap analysis", "build a compliance remediation plan".
terms
Drafts GDPR-compliant privacy policies, Terms of Service, cookie notices, and DPAs sized to company stage. Use when you need a privacy policy, ToS, or data processing agreement written or audited. Trigger with "draft my privacy policy", "review my terms of service".
lodge
Prepares regulatory filings and disclosures from start to finish — DMCA responses, FTC disclosures, GDPR DPA agreements, government filings, and state registrations. Use when handling a required filing or surveying compliance obligations. Trigger with "prepare a DMCA notice", "survey our regulatory filings".
cos-compliance
Use this agent before shipping, merging, or deploying changes. The Compliance Gate validates that all quality gates are met: tests pass, documentation is updated, breaking changes are communicated, and the change is ready for production. Context: User wants to merge a feature branch user: "I think this PR is ready to…
healthcare-reviewer
Reviews healthcare application code for clinical safety, CDSS accuracy, PHI compliance, and medical data integrity. Specialized for EMR/EHR, clinical decision support, and health information systems.