Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Ghosteken/agent-harness --skill atlas-contractgit clone --depth 1 https://github.com/Ghosteken/agent-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ghosteken/agent-harness/atlas-contract)<a href="https://agentmods.dev/skills/ghosteken/agent-harness/atlas-contract"><img src="https://agentmods.dev/badge/skills/ghosteken/agent-harness/atlas-contract/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ghosteken/agent-harness/atlas-contract"><img src="https://agentmods.dev/badge/skills/ghosteken/agent-harness/atlas-contract.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.09507 |
| Opus 5 | $0.00028 | $0.04754 |
| Sonnet 5 | $0.00011 | $0.01901 |
| Haiku 4.5 | $0.00006 | $0.00951 |
Grade A, and why
atlas-contract scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
94% identical to atlas-contract — 22 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 651 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Atlas Contract v6.2
Keep the agent aligned with the user's original goal during execution.
Contents
- Output Language
- When To Use Atlas, and How Much
- Footprints
- Anti-Drift Defaults 5–7. Goal Contract: build, format, confirmation gate
- Phases (Heavy footprint) 9–11. Deviation Notices, Phase Checks, escalation
- Final Audit — includes automatic atlas-ledger handoff
- Post Review
- Final Principle
Quick reference
| Situation | Tier | What runs |
|---|---|---|
| Any hard Heavy anchor fires (§2) | Heavy | Contract → Phase Ledger (≤4 phases) → Phase Checks → Final Audit |
| 3+ risk signals, or genuinely ambiguous | Heavy | same as above |
| 1–2 risk signals, single-part, clear | Medium | Contract (Gate) → straight run → Final Audit |
| 0 signals, atomic change | Light | Internal contract only; no events unless a trigger fires |
| Q&A, explanation, trivial edit | — | Atlas does not run |
Hard deviation caught in Final Audit → atlas-ledger distillation runs automatically; write to Atlas.md still requires user confirmation.
Atlas does not make the agent smarter. Atlas makes the agent less likely to silently change, narrow, weaken, reinterpret, or prematurely declare the user's goal complete.
Atlas earns its cost on long, complex, high-risk work — that is where silent drift actually happens. On small, low-risk tasks it should stay nearly invisible. The agent's footprint must scale with task complexity (see §2). For long or high-risk work, Atlas is a phase-governance protocol, not just a preflight checklist.
Core Rule
Challenge the user's goal when necessary. Never silently modify, narrow, hide, remove, disable, stub, mock, substitute, weaken, reinterpret, or declare partial work complete.
If a requirement must change, disclose the change before acting. If uncertainty may affect the user's goal, stop and ask.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 651 lines · 56 tokens per session scan A b5aa4f6aee24
atlas-contract is a skill published in the GitHub repository Ghosteken/agent-harness (2 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 9,507 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 94% identical to atlas-contract, differing in 22 lines, and is treated as a copy.
Other skills, from other repositories
agent-self-scheduling
Schedule AI agent runs with cron, loops, or external clocks while avoiding unsafe tight autonomous timers.
serial
A tool for communicating with devices over serial ports, such as USB-to-UART connections. It can find ports, watch incoming data, send messages, save logs, and display raw bytes in hexadecimal form.
eide
A build tool for EIDE projects, an embedded-development extension for Visual Studio Code. It finds EIDE project settings and builds firmware using ARM CC or GCC.
net
A toolkit for diagnosing network connections and traffic in embedded systems. A packet capture is a recorded sample of network traffic, and this tool can create or analyze captures in formats such as pcap and pcapng.
terminal
An interactive terminal session that keeps a live connection to a local shell, an SSH remote computer, or a serial device. It lets you send commands and read the next output while preserving the session’s login, menu, or program state.
probe-rs
A command-line tool wrapper for probe-rs, which connects a computer to a microcontroller through a hardware debug probe. It supports common firmware programming and debugging operations over SWD or JTAG.