Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ogasurfproject-jpg/horizon-shield --skill conduct-witnessgit clone --depth 1 https://github.com/ogasurfproject-jpg/horizon-shieldWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ogasurfproject-jpg/horizon-shield/conduct-witness)<a href="https://agentmods.dev/skills/ogasurfproject-jpg/horizon-shield/conduct-witness"><img src="https://agentmods.dev/badge/skills/ogasurfproject-jpg/horizon-shield/conduct-witness/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ogasurfproject-jpg/horizon-shield/conduct-witness"><img src="https://agentmods.dev/badge/skills/ogasurfproject-jpg/horizon-shield/conduct-witness.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.00745 |
| Opus 5 | $0.00039 | $0.00373 |
| Sonnet 5 | $0.00016 | $0.00149 |
| Haiku 4.5 | $0.00008 | $0.00075 |
Grade A, and why
conduct-witness scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sSLO https://raw.githubusercontent.com/ogasurfproject-jpg/horizon-shield/main/workers/hs-ledger/nenrin/a2a-conduct-walk/a2a_conduct_walk.py && python3 a2a_conduct_walk.py --origin <ORIGIN> --mode a2a --submit --wit How it starts
The opening of the file, as written. The whole thing — 39 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Conduct witness
You are about to add one line to a record that the agent being walked did not write and cannot delete. Treat it that way: no guessing, no editing, no invented names.
Before running
- Ask the user once, if not already known in this conversation: their witness name (a person, a project, or "anonymous") and the vantage (where this machine is, in a few words: "laptop, Osaka", "VPS eu-west", "CI runner"). Never invent either. Reuse them for later walks in the same conversation.
- Confirm the origin is
https://and is the agent's card origin (the card lives at<origin>/.well-known/agent-card.json), not a page on the site. - Do not walk an agent whose owner has declined measurement (
listing: "decline"in the origin's/.well-known/mcp-conduct.json). If unsure, fetch that file first; absent means no objection.
Run
Preferred (uv installed):
uvx --from "git+https://github.com/ogasurfproject-jpg/horizon-shield#subdirectory=workers/hs-ledger/nenrin/a2a-conduct-walk" a2a-conduct-walk --origin <ORIGIN> --mode a2a --submit --witness-name "<NAME>" --vantage "<VANTAGE>"
Fallback (no uv):
curl -sSLO https://raw.githubusercontent.com/ogasurfproject-jpg/horizon-shield/main/workers/hs-ledger/nenrin/a2a-conduct-walk/a2a_conduct_walk.py && python3 a2a_conduct_walk.py --origin <ORIGIN> --mode a2a --submit --witness-name "<NAME>" --vantage "<VANTAGE>"
If a fetch node shows http 403 at the edge, rerun with --transport curl. If the user asked to look before filing, omit --submit first, show the assertions, then rerun with --submit only if they say so.
Report back, exactly
Give the user these five things from the output, verbatim: the purpose line (which endpoint), PASS n/5 or FAIL n/5, the record's sha256, the intake's answer (submitted ... http 200 or the reason it was not submitted), and the list of assertions with pass / FAIL / n/a. Say that a FAIL is filed the same way as a PASS and is a finding about the agent, not an error in the walk. Say where it will show up: the ledger bundles the pool once a day (00:30 UTC) at https://ledger.horizonshield.dev/ledger and the month's ring counts the witness by name.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 39 lines · 79 tokens per session scan A 5ddc54d7703a
conduct-witness is a skill published in the GitHub repository ogasurfproject-jpg/horizon-shield (1 stars, last pushed yesterday), licensed MIT. It adds 79 tokens to every session and 745 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other skills, from other repositories
anyapi
Get live data from LinkedIn, Instagram, TikTok, YouTube, X/Twitter, Reddit, Facebook, Google Search, Google Maps, and Amazon, plus clean JSON from any web page that blocks bots - one key, USD pay-per-request, free trial built in. Use whenever a task needs third-party data that a direct fetch or a general web search…
alexandria
Reach for this when a research question needs cited sources across academic papers, public domain books, legal records, government archives, security advisories, news, or developer documentation. Alexandria is an MCP server backed by 152 public digital libraries; use it whenever an answer should point at real…
devcdp
How to debug a running web app with the DevCDP tools - connect to a tab, reload to capture, drive the page with the ui tools, set breakpoints that bind, and hand off to the user. Use whenever DevCDP tools are available and the task involves a web page, the browser, console or network output, or a front-end bug.
validate-python
Prove generated Python does what was asked before presenting it — lint, types, an AST security policy, a credential scan, and a sandbox run against examples. Use when writing, editing or reviewing Python.
tournament-organiser
Organise and run a recreational racket-sport tournament (tennis, padel, pickleball, badminton, squash, table tennis) with Turnale. Use when the user wants to set up, run, or manage a tournament, league night, americano, or club social.
repo-bootstrap
Automate full ANAMIZED product repo structure (Server OS parity) including USDC, Stripe, badges, CI, skills, AGENTS.md.