Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ryan-scheinberg/harness --skill role-rootgit clone --depth 1 https://github.com/ryan-scheinberg/harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ryan-scheinberg/harness/role-root)<a href="https://agentmods.dev/skills/ryan-scheinberg/harness/role-root"><img src="https://agentmods.dev/badge/skills/ryan-scheinberg/harness/role-root/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ryan-scheinberg/harness/role-root"><img src="https://agentmods.dev/badge/skills/ryan-scheinberg/harness/role-root.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00014 | $0.00990 |
| Opus 5.5 | $0.00006 | $0.00396 |
| Sonnet 5.5 | $0.00003 | $0.00198 |
| Haiku 4.5 | $0.00001 | $0.00099 |
Grade A, and why
role-root scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are the root session. When the user runs bare codex, you appear
Handle whatever lands here. Default to doing the work directly, with the help of $role-verify and subagents. When a task outgrows one context, orchestrate it — you stay the only point of contact and drive it to shipped, no one pinging back
Orchestrating
Spawn with agent_type: "luna_builder" per implementation unit, its prompt opening $role-build plus the context it needs. When the spawn schema exposes fork_turns, pass fork_turns: "none" so the custom role/model override applies. After assembling the batch, record the exact pre-batch commit as base and run Fable directly in the foreground:
env -u ANTHROPIC_API_KEY -u ANTHROPIC_AUTH_TOKEN -u ANTHROPIC_BASE_URL \
-u CLAUDE_CODE_USE_BEDROCK -u CLAUDE_CODE_USE_VERTEX -u CLAUDE_CODE_USE_FOUNDRY \
claude -p --model fable --effort medium --dangerously-skip-permissions --no-session-persistence \
"/role-qa ... exact <base>..HEAD range ... info about what to qa + approvals / what it's allowed to do to qa such as full playwright."
Use the shell tool's full-access mode for this call: Claude's subscription credential lives in the macOS Keychain, which the default Codex workspace sandbox cannot read. This is one blocking call, not a Codex courier or tracked plugin job. Keep it blocked until Claude exits (poll a yielded shell session); treat a nonzero exit or authentication message as BLOCKED. Fable must return PASS, FAIL, or BLOCKED and must not edit or fix code
$role-buildviaagent_type: "luna_builder"— one unit of work: architected, built, self-proven, committed, returned. One agent per independent unit; they run in parallel- Fable QA — the foreground
claude -p --model fablecall above, with the assembled-batch prompt beginning/role-qa $role-deploy— ships the verified batch through the project's deploy skill$role-harness-engineer— evolve the harness itself (skills,AGENTS.md, hooks) when real work exposes a gap. Outside the product loop
The loop: cut the work into units → a luna_builder agent per unit, each prompt beginning $role-build → merge the finished units to main yourself → run the foreground Fable QA call on the assembled <base>..HEAD range → spawn luna_builder to fix what Fable finds, QA evidence in the prompt → rerun Fable → $role-deploy. You read each return and decide the next move; nothing reaches back into a running subagent
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 57 lines · 14 tokens per session scan A 3673df459db6
role-root is a skill published in the GitHub repository ryan-scheinberg/harness (2 stars, last pushed 3mo ago), licensed MIT. It adds 14 tokens to every session and 990 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
gleanin
Rules distilled from past session friction (errors, edit loops, corrections), analyzed by a stronger model and applied to guide future work. Regenerated from glean/artifacts/ plus an index of trigger-loaded protocols from GLEANPROTOCOLDIRS by sync.sh — load every session via CLAUDE.md.
exploratory-data-analysis
Performs bounded, local exploratory analysis of explicitly supported scientific files. Supports redacted CSV/TSV/JSON profiles; optional NumPy, HDF5, FASTA/FASTQ, and basic image metadata inspection; missingness/leakage audits; outlier and transformation sensitivity; and rigorous EDA report scaffolds. Other domain…
data-charts-tako
Search and visualize the world's data - get charts, insights, and embeddable knowledge cards for finance, economics, demographics, sports, and more.
webhook-management
Configure and validate CCAM webhook targets across supported chat, incident, automation, and generic providers. Use when listing provider requirements, creating or updating a target, scoping it to alert rules, sending a test notification, reviewing delivery history, or deleting a target.
design-review
Review a web app or page for visual design quality — layout, typography, spacing, colour, hierarchy, consistency, interaction patterns, and responsive behaviour. Not a UX audit (that checks usability) — this checks whether it looks professional and polished. Produces a design findings report with screenshots.…
gesellschaftsrechtliche-satzungen-agb
Für Gesellschaftsrechtliche Satzungen AGB Abgrenzung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: gesellschaftsrechtliche-satzungen-agb.