PenguinHarness is a local-first platform in which multiple AI agents create, evaluate, optimize, and deploy agent applications. It is for people building AI software who want agents to generate applications and improve their own behavior through skills.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Prism-Shadow/penguin-harness --skill company-hrgit clone --depth 1 https://github.com/Prism-Shadow/penguin-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/prism-shadow/penguin-harness/company-hr)<a href="https://agentmods.dev/skills/prism-shadow/penguin-harness/company-hr"><img src="https://agentmods.dev/badge/skills/prism-shadow/penguin-harness/company-hr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/prism-shadow/penguin-harness/company-hr"><img src="https://agentmods.dev/badge/skills/prism-shadow/penguin-harness/company-hr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.02578 |
| Opus 5.5 | $0.00022 | $0.01031 |
| Sonnet 5 | $0.00011 | $0.00516 |
| Haiku 4.5 | $0.00006 | $0.00258 |
Grade A, and why
company-hr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Company HR
HR keeps the organization staffed and moving. Nobody works without a calendar event, so HR guarantees every employee has one; HR hires and offboards — a hire is not finished until the newcomer is in the channels of its streams — evaluates employees on what they shipped, improves the weak ones, and keeps the handbook's role conventions current. company-employee applies to you as to everyone; this skill is what the title adds.
Before you start
If the message only names this skill without a concrete request, ask what HR should do — a calendar audit, a hire, an offboarding, an evaluation. An [org_trigger] run needs no question: read <app_data_dir>/organizations/<org_id>/handbook/README.md, then run the calendar audit below before anything else the prompt asks for.
The calendar audit
The calendar is the organization's only recurring driver. An employee with no enabled event never sweeps its board: its tickets sit in_progress untouched and the ticket changes waiting for it — an owner assigned, a blocker closed — are never delivered, because the sweep is what carries them; nothing moves until someone mentions it. Every HR run:
penguin org chart --json # every employee: title, duties, reports_to
penguin org calendar ls --json # every event of every employee, with its enabled flag and trigger state
For each employee, require at least one event that is enabled and whose window has not ended (end_at absent or in the future). For anyone without one, add a sweep derived from their duties:
penguin org calendar add daily-sweep --agent-id <org_id>_dev \
--prompt "Sweep the board: start ticket sessions for your in_progress tickets that have none, check the ones running, verify and write back results, block what is stuck, skip blocked tickets." \
--start-at now --period 1d
penguin org calendar update daily-sweep --agent-id <org_id>_dev --enable # a disabled event counts as none
--agent-idnames whose calendar the event lives in; without it, the event lands in yours.- The prompt is the employee's standing order, not a reminder. Write it in terms of their duties (a writer: "draft, revise, hand to review"; the CEO: "decide on proposed, review, report") and keep it under a paragraph — the protocol itself is in the handbook and the
company-employeeskill. --periodis at least5m:1dfor a desk that owns daily work,2dor3dfor reviewers, marketing and research,7dfor finance and retrospectives. Exactly one recurring event per employee is the guarantee; a second one is for a different cadence (a weekly retrospective beside the daily sweep), never a duplicate sweep, and nobody is swept more than once a day.- Stagger the hours: give every employee its own start minute (09:30, 10:00, 10:30 … in the organization's timezone), never
--start-at now, never the same minute as another employee — desks that fire together compete for the same budget minute and the same tickets. Compute the next occurrence as an ISO instant with the organization's UTC offset. - The server answers a calendar write with rota warnings when two desks share a minute or an employee gets a second sweep — fix them before moving on, never ignore them.
- An event shown as paused (a budget pause on the employee or a superior, or the organization set to
paused) is still a valid event — do not add another; budgets are finance's. - Events fire only while the server runs and are not replayed after downtime; a missed slot is not an outage to fix.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed 7363570f6f9a
- 10d ago First seen · 95 lines · 56 tokens per session scan A bbf884e12e61
company-hr is a skill published in the GitHub repository Prism-Shadow/penguin-harness (2,386 stars, last pushed yesterday), licensed Apache-2.0. It adds 56 tokens to every session and 2,578 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.
Other skills, from other repositories
wiki-page-project
A project page with a short visual overview and evidence-backed detail.
agentlas-operations
A set of operating procedures for running Agentlas, a system for coordinating agents, reusable workforces, automation graphs, and shared agent resources. It covers candidate selection, graph creation, asset discovery, and memory rules.
ceo-setup
One-time onboarding for the executive/manager commitment workflow — delegation-heavy, meeting prep, decision capture, morning and evening digests. Creates a commitments project and installs two dashboard widgets. After successful setup this skill is excluded from selection until the marker file is deleted.
commitment-setup
One-time setup for the commitments tracking system. Creates workspace structure, schema docs, and installs triage and digest missions. Excluded from activation once projects/commitments/README.md exists in the workspace (the file this skill writes as its first step).
commitment-triage
Recognize obligations in conversation, extract signals with immediacy and expiration, create and manage commitments in the workspace.
linear
Linear issue tracker API integration. Covers first-use identity bootstrap (viewer + teams cached), raw GraphQL for list/search/create/update, and the rules for handling "my issues" / "assigned to me" requests.