Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/forcewake/hermes-conductor/kanban-workernpx skills add forcewake/hermes-conductor --skill kanban-workergit clone --depth 1 https://github.com/forcewake/hermes-conductorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/forcewake/hermes-conductor/kanban-worker)<a href="https://agentmods.dev/skills/forcewake/hermes-conductor/kanban-worker"><img src="https://agentmods.dev/badge/skills/forcewake/hermes-conductor/kanban-worker.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.02595 |
| Opus 5 | $0.00009 | $0.01298 |
| Sonnet 5 | $0.00003 | $0.00519 |
| Haiku 4.5 | $0.00002 | $0.00260 |
Grade A, and why
kanban-worker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
83% identical to kanban-worker — 61 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 190 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Kanban Worker — Pitfalls and Examples
You're seeing this skill because the Hermes Kanban dispatcher spawned you as a worker with
--skills kanban-worker— it's loaded automatically for every dispatched worker. The lifecycle (6 steps: orient → work → heartbeat → block/complete) also lives in theKANBAN_GUIDANCEblock that's auto-injected into your system prompt. This skill is the deeper detail: good handoff shapes, retry diagnostics, edge cases.
Workspace handling
Your workspace kind determines how you should behave inside $HERMES_KANBAN_WORKSPACE:
| Kind | What it is | How to work |
|---|---|---|
scratch |
Fresh tmp dir, yours alone | Read/write freely; it gets GC'd when the task is archived. |
dir:<path> |
Shared persistent directory | Other runs will read what you write. Treat it like long-lived state. Path is guaranteed absolute (the kernel rejects relative paths). |
worktree |
Git worktree at the resolved path | If .git doesn't exist, run git worktree add <path> ${HERMES_KANBAN_BRANCH:-wt/$HERMES_KANBAN_TASK} from the main repo first, then cd and work normally. Commit work here. |
Tenant isolation
If $HERMES_TENANT is set, the task belongs to a tenant namespace. When reading or writing persistent memory, prefix memory entries with the tenant so context doesn't leak across tenants:
- Good:
business-a: Acme is our biggest customer - Bad (leaks):
Acme is our biggest customer
Good summary + metadata shapes
The kanban_complete(summary=..., metadata=...) handoff is how downstream workers read what you did. Patterns that work:
Coding task:
kanban_complete(
summary="shipped rate limiter — token bucket, keys on user_id with IP fallback, 14 tests pass",
metadata={
"changed_files": ["rate_limiter.py", "tests/test_rate_limiter.py"],
"tests_run": 14,
"tests_passed": 14,
"decisions": ["user_id primary, IP fallback for unauthenticated requests"],
},
)
Coding task that needs human review (review-required):
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 190 lines · 0 tokens per session scan A a8a8c228d45c
kanban-worker is a skill published in the GitHub repository forcewake/hermes-conductor (71 stars, last pushed 11d ago), licensed MIT. It adds 17 tokens to every session and 2,595 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. It is 83% identical to kanban-worker, differing in 61 lines, and is treated as a copy.
Other skills, from other repositories
review
M-1.5 review skill — 在 patch 跟 contract 之间找 finding,produce Finding 一等对象。.
fix-self-check
M-1.6 envelope self-check——独立性保证不自欺欺人 (5 blockingcheck)。由 CLI ./tw fix complete --self-check-mode fork(默认即 fork)自动派起,不经 Skill 工具调用;fix 主会话产 FixCompleted 前直读本文,是为理解双层验证关系。.
plan-decompose
从 completioncondition + conceptgraph 递归分解出 primitive task 提案。主 planner session 决定接受/调整/拆得更细。.
handoff
当你正要把一件事交到另一个智能手里时用它——派发一个 worker、向上回报、问人/问 owner、为后来的 agent 留下上下文,或装配要喂给下游的 context。它装的不是"怎么写一段提示词",是"一个智能该怎么跟另一个智能沟通":先建对方的读者模型,只交思考和判断、把路留给对方,在控制与信任之间导航。只要你在写一段会被另一个 AI 读的文字——dispatch、brief、handoff、交接信、context 装配、给下游 agent 的指令——就用它,哪怕你只把它叫做"写个派发提示词"。正要派任务的时刻同样算:dispatch 一个 task、起一个 fork / worker / fix 会话 /…
planning
M-1.3 planner skill — 把 frozen consensus 翻译成 TaskNode 图 + 依赖边 + 资源 claim。.
npm-security-best-practices
Apply npm/pnpm supply-chain hardening when adding a dependency, editing package.json/.npmrc/pnpm-workspace.yaml, reviewing a lockfile change, or configuring CI install steps. Covers the 17 practices from lirantal/npm-security-best-practices.