Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/addxai/enterprise-harness-engineering/gitlab-mrnpx skills add addxai/enterprise-harness-engineering --skill gitlab-mrgit clone --depth 1 https://github.com/addxai/enterprise-harness-engineeringWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/addxai/enterprise-harness-engineering/gitlab-mr)<a href="https://agentmods.dev/skills/addxai/enterprise-harness-engineering/gitlab-mr"><img src="https://agentmods.dev/badge/skills/addxai/enterprise-harness-engineering/gitlab-mr.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00108 | $0.01987 |
| Opus 5 | $0.00054 | $0.00993 |
| Sonnet 5 | $0.00022 | $0.00397 |
| Haiku 4.5 | $0.00011 | $0.00199 |
Grade A, and why
gitlab-mr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 258 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitLab MR
Create an MR and drive it to a truly mergeable state (all CI green + no merge conflicts). Core principle: write documentation first, then submit the MR, verify with APIs, and loop through fixes until the MR is mergeable.
Prerequisite: The current repository's remote points to gitlab.example.com, and glab CLI is installed.
Rules
- Never use the
skip-doc-checklabel — every MR must have a real documentation link - User Story must be relevant to the MR changes — CI checks relevance (
check:mr-us-relevance); irrelevant links will be rejected - Blob links must point to pushed files — the branch name and file path in the link must exist on the remote
- Verify with APIs, don't guess — confirm results at every step using
glabcommands
Execution Flow
Step 1: Check Prerequisites
# Confirm remote points to gitlab.example.com
git remote get-url origin
# Confirm current branch is not main/master
git branch --show-current
# Confirm no uncommitted changes
git status
If there are uncommitted changes, commit or stash them first.
Step 2: Ensure Documentation Exists
The MR description must contain documentation links. CI performs two checks:
check:mr-documentation: whether the link format is validcheck:mr-us-relevance: whether the linked document is relevant to the MR changes
Prefer GitLab blob links pointing to documentation files within the repository.
2a: Find or Create Documentation
Check whether related documentation already exists in the repository:
# Look for potentially related documents
ls docs/plans/ docs/04-user-stories/ 2>/dev/null
If no related documentation exists, create one for this MR:
- Place the document at
docs/plans/YYYY-MM-DD-<feature-name>.md(design doc) ordocs/04-user-stories/<feature-name>.md(User Story) - The document content must cover the core changes in this MR (otherwise the relevance check will fail)
- The document does not need to be long, but must describe: what was done and why
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 258 lines · 108 tokens per session scan A c091a8214871
gitlab-mr is a skill published in the GitHub repository addxai/enterprise-harness-engineering (44 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 108 tokens to every session and 1,987 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
peon-ping-create-pack
Internal — invoked headlessly by peon create; humans should run peon create instead. Author and render a brand-new PeonPing draft pack — invoked headlessly as: "Use the peon-ping-create-pack skill to draft a pack: name= flavor= vibe= draftroot= . Follow the skill exactly." Authors all 7 CESP categories honoring the…
peon-ping-use
Set which voice pack (character voice) plays for the current chat session. Automatically enables sessionoverride rotation mode if not already set. Use when user wants a specific character voice like GLaDOS, Peon, or Kerrigan for this conversation.
peon-ping-rename
Rename the current Claude session for peon-ping notifications and terminal tab title. Use when user wants to give this session a custom name like "/peon-ping-rename Auth Refactor". Call with no argument to reset to auto-detect.
peon-ping-toggle
Toggle peon-ping sound notifications on/off. Use when user wants to mute, unmute, pause, or resume peon sounds during a Claude Code session. Also handles config changes like volume, pack rotation, categories — any peon-ping setting.
peon-ping-log
Log exercise reps for the Peon Trainer. Use when user says they did pushups, squats, or wants to log reps. Examples - "/peon-ping-log 25 pushups", "/peon-ping-log 30 squats", "log 50 pushups".
peon-ping-remix
Internal — invoked headlessly by the peon eval server; humans should run peon eval instead. Execute one PeonPing reroll job — invoked headlessly by the peon eval server as: "Use the peon-ping-remix skill to execute the reroll job at ". Reads the job JSON (scope, category, index, caption), rewrites the affected sound…