company-hr

company-hr is a skill for Claude Code, Codex from Prism-Shadow/penguin-harness. It costs 56 tokens per session (2,578 once invoked), scanned A, original, Apache-2.0.

An automated HR procedure for an organization of coding agents. It manages agent calendars, hiring, offboarding, evaluations, and role rules in the organization's handbook.

In plain words
What is it for?
It is for auditing work schedules, adding or removing employees, reviewing their work, improving them, and maintaining the organization's role conventions.
Why use it?
Without these checks, an agent may have no scheduled work, new hires may miss required channels, or weak performance and outdated role rules may go unnoticed.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions AGENTS.md.

Good fit It is for auditing work schedules, adding or removing employees, reviewing their work, improving them, and maintaining the organization's role conventions.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/prism-shadow/penguin-harness/company-hr
About the project

PenguinHarness is a local-first platform in which multiple AI agents create, evaluate, optimize, and deploy agent applications. It is for people building AI software who want agents to generate applications and improve their own behavior through skills.

Prism-Shadow/penguin-harness · 2,386 stars · on GitHub · penguin.ooo

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Prism-Shadow/penguin-harness --skill company-hr
Clone the repo
git clone --depth 1 https://github.com/Prism-Shadow/penguin-harness

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for company-hr

README.md
[![agentmods](https://agentmods.dev/badge/skills/prism-shadow/penguin-harness/company-hr/github.svg)](https://agentmods.dev/skills/prism-shadow/penguin-harness/company-hr)
Your own site
<a href="https://agentmods.dev/skills/prism-shadow/penguin-harness/company-hr"><img src="https://agentmods.dev/badge/skills/prism-shadow/penguin-harness/company-hr/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for company-hr

Your own site · 80×15
<a href="https://agentmods.dev/skills/prism-shadow/penguin-harness/company-hr"><img src="https://agentmods.dev/badge/skills/prism-shadow/penguin-harness/company-hr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 56 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,578 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00056 $0.02578
Opus 5.5 $0.00022 $0.01031
Sonnet 5 $0.00011 $0.00516
Haiku 4.5 $0.00006 $0.00258

Measured 8d ago against content hash 7363570f6f9a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-26, from the pricing page.

Security

Grade A, and why

company-hr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/agent-company/skills/company-hr/SKILL.md · 95 lines

How it starts

The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Company HR

HR keeps the organization staffed and moving. Nobody works without a calendar event, so HR guarantees every employee has one; HR hires and offboards — a hire is not finished until the newcomer is in the channels of its streams — evaluates employees on what they shipped, improves the weak ones, and keeps the handbook's role conventions current. company-employee applies to you as to everyone; this skill is what the title adds.

Before you start

If the message only names this skill without a concrete request, ask what HR should do — a calendar audit, a hire, an offboarding, an evaluation. An [org_trigger] run needs no question: read <app_data_dir>/organizations/<org_id>/handbook/README.md, then run the calendar audit below before anything else the prompt asks for.

The calendar audit

The calendar is the organization's only recurring driver. An employee with no enabled event never sweeps its board: its tickets sit in_progress untouched and the ticket changes waiting for it — an owner assigned, a blocker closed — are never delivered, because the sweep is what carries them; nothing moves until someone mentions it. Every HR run:

penguin org chart --json                  # every employee: title, duties, reports_to
penguin org calendar ls --json            # every event of every employee, with its enabled flag and trigger state

For each employee, require at least one event that is enabled and whose window has not ended (end_at absent or in the future). For anyone without one, add a sweep derived from their duties:

penguin org calendar add daily-sweep --agent-id <org_id>_dev \
  --prompt "Sweep the board: start ticket sessions for your in_progress tickets that have none, check the ones running, verify and write back results, block what is stuck, skip blocked tickets." \
  --start-at now --period 1d
penguin org calendar update daily-sweep --agent-id <org_id>_dev --enable      # a disabled event counts as none
  • --agent-id names whose calendar the event lives in; without it, the event lands in yours.
  • The prompt is the employee's standing order, not a reminder. Write it in terms of their duties (a writer: "draft, revise, hand to review"; the CEO: "decide on proposed, review, report") and keep it under a paragraph — the protocol itself is in the handbook and the company-employee skill.
  • --period is at least 5m: 1d for a desk that owns daily work, 2d or 3d for reviewers, marketing and research, 7d for finance and retrospectives. Exactly one recurring event per employee is the guarantee; a second one is for a different cadence (a weekly retrospective beside the daily sweep), never a duplicate sweep, and nobody is swept more than once a day.
  • Stagger the hours: give every employee its own start minute (09:30, 10:00, 10:30 … in the organization's timezone), never --start-at now, never the same minute as another employee — desks that fire together compete for the same budget minute and the same tickets. Compute the next occurrence as an ISO instant with the organization's UTC offset.
  • The server answers a calendar write with rota warnings when two desks share a minute or an employee gets a second sweep — fix them before moving on, never ignore them.
  • An event shown as paused (a budget pause on the employee or a superior, or the organization set to paused) is still a valid event — do not add another; budgets are finance's.
  • Events fire only while the server runs and are not replayed after downtime; a missed slot is not an outage to fix.

Read the full file on GitHub · 95 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago Changed 7363570f6f9a
  2. 10d ago First seen · 95 lines · 56 tokens per session scan A bbf884e12e61

Subscribe to this mod's changes

company-hr is a skill published in the GitHub repository Prism-Shadow/penguin-harness (2,386 stars, last pushed yesterday), licensed Apache-2.0. It adds 56 tokens to every session and 2,578 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.

Related

Other skills, from other repositories

wiki-page-project

A project page with a short visual overview and evidence-backed detail.

openonion/connectonion · 17 tokens

agentlas-operations

A set of operating procedures for running Agentlas, a system for coordinating agents, reusable workforces, automation graphs, and shared agent resources. It covers candidate selection, graph creation, asset discovery, and memory rules.

agentlas-ai/Agentlas-OS · 67 tokens

ceo-setup

One-time onboarding for the executive/manager commitment workflow — delegation-heavy, meeting prep, decision capture, morning and evening digests. Creates a commitments project and installs two dashboard widgets. After successful setup this skill is excluded from selection until the marker file is deleted.

suyoumo/ClawProBench · 60 tokens

commitment-setup

One-time setup for the commitments tracking system. Creates workspace structure, schema docs, and installs triage and digest missions. Excluded from activation once projects/commitments/README.md exists in the workspace (the file this skill writes as its first step).

suyoumo/ClawProBench · 58 tokens

commitment-triage

Recognize obligations in conversation, extract signals with immediacy and expiration, create and manage commitments in the workspace.

suyoumo/ClawProBench · 29 tokens

linear

Linear issue tracker API integration. Covers first-use identity bootstrap (viewer + teams cached), raw GraphQL for list/search/create/update, and the rules for handling "my issues" / "assigned to me" requests.

suyoumo/ClawProBench · 45 tokens