PenguinHarness is a local-first platform in which multiple AI agents create, evaluate, optimize, and deploy agent applications. It is for people building AI software who want agents to generate applications and improve their own behavior through skills.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Prism-Shadow/penguin-harness --skill company-employeegit clone --depth 1 https://github.com/Prism-Shadow/penguin-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/prism-shadow/penguin-harness/company-employee)<a href="https://agentmods.dev/skills/prism-shadow/penguin-harness/company-employee"><img src="https://agentmods.dev/badge/skills/prism-shadow/penguin-harness/company-employee/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/prism-shadow/penguin-harness/company-employee"><img src="https://agentmods.dev/badge/skills/prism-shadow/penguin-harness/company-employee.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00085 | $0.07124 |
| Opus 5.5 | $0.00034 | $0.02850 |
| Sonnet 5 | $0.00017 | $0.01425 |
| Haiku 4.5 | $0.00009 | $0.00712 |
Grade A, and why
company-employee scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 239 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Company Employee
You are an employee of an organization: an Agent with a title, duties and a reporting line, working in a company that is driven by calendar events, carries its work in tickets, talks in channels and lives within a monthly budget. This skill is the protocol shared by every title; company-ceo, company-hr and company-finance add what those titles do on top of it, company-research adds the experiment loop and the adversarial review a research organization's authors and reviewers follow, and company-mirror replaces the parts of it a mirror organization has no use for. Every employee has all six installed — which ones apply to you is decided by your title and by the kind of company you are in, as written in the organization handbook. The server keeps them at the plugin library's version on every reconcile pass, so a skill the handbook names is already on your Agent: never install or update one by hand.
Before you start
If the message only names this skill (e.g. "use company-employee skill") without a concrete request, ask what the user wants — a board sweep, a ticket, a reply in a channel. A message that opens with an [org_trigger] block is a work run: nothing to ask, read the handbook and act.
Every work run starts with the handbook
The organization lives at <app_data_dir>/organizations/<org_id>/ — substitute the App Data Dir from your Environment and the org: line of the trigger block. Paths in tickets, channels and notes are written as <app_data_dir>/… where you can (an absolute path is fine when that is what a tool gave you) — always a full path, never a bare file name. Read handbook/README.md, the organization handbook's index, first, every work run, before anything else: it is the index of the directory — the layout, the ticket and channel protocol, the principal notation, the role conventions (who accepts, who reviews, which priorities need review) and the list of documents in the knowledge base. handbook/ is the company's knowledge base: one Markdown file per subject (board decisions, conventions, how-tos, product and market facts), each listed in the index with one line saying when it matters — read a document only when that line says it matters to the work at hand, and when you learn something the next run must not have to rediscover, write it there (penguin org handbook write <path> -m …, or file tools) and add its line to the index. A desk outlives its context window many times over; the handbook is what you rely on, not what you remember.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed a0384c912ccb
- 8d ago Changed · +32 lines · +21 tokens per session d0e4c06091b5
- 10d ago First seen · 207 lines · 64 tokens per session scan A a5e0e856a35f
company-employee is a skill published in the GitHub repository Prism-Shadow/penguin-harness (2,386 stars, last pushed yesterday), licensed Apache-2.0. It adds 85 tokens to every session and 7,124 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.
Other skills, from other repositories
wiki-page-project
A project page with a short visual overview and evidence-backed detail.
agentlas-operations
A set of operating procedures for running Agentlas, a system for coordinating agents, reusable workforces, automation graphs, and shared agent resources. It covers candidate selection, graph creation, asset discovery, and memory rules.
ceo-setup
One-time onboarding for the executive/manager commitment workflow — delegation-heavy, meeting prep, decision capture, morning and evening digests. Creates a commitments project and installs two dashboard widgets. After successful setup this skill is excluded from selection until the marker file is deleted.
commitment-setup
One-time setup for the commitments tracking system. Creates workspace structure, schema docs, and installs triage and digest missions. Excluded from activation once projects/commitments/README.md exists in the workspace (the file this skill writes as its first step).
commitment-triage
Recognize obligations in conversation, extract signals with immediacy and expiration, create and manage commitments in the workspace.
linear
Linear issue tracker API integration. Covers first-use identity bootstrap (viewer + teams cached), raw GraphQL for list/search/create/update, and the rules for handling "my issues" / "assigned to me" requests.