Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add SaikaAco/saika-hermes-skills --skill hermes-workspace-hygienegit clone --depth 1 https://github.com/SaikaAco/saika-hermes-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/saikaaco/saika-hermes-skills/hermes-workspace-hygiene)<a href="https://agentmods.dev/skills/saikaaco/saika-hermes-skills/hermes-workspace-hygiene"><img src="https://agentmods.dev/badge/skills/saikaaco/saika-hermes-skills/hermes-workspace-hygiene/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/saikaaco/saika-hermes-skills/hermes-workspace-hygiene"><img src="https://agentmods.dev/badge/skills/saikaaco/saika-hermes-skills/hermes-workspace-hygiene.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.01203 |
| Opus 5.5 | $0.00018 | $0.00481 |
| Sonnet 5.5 | $0.00009 | $0.00241 |
| Haiku 4.5 | $0.00004 | $0.00120 |
Grade A, and why
hermes-workspace-hygiene scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 132 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Hermes Workspace Hygiene
Overview
Keep Hermes-generated artifacts predictable, scoped, and recoverable:
- temporary/intermediate files go under
<active-workspace>/scratch/; - generated reports intended for reading or sending go under
<active-workspace>/reports/; - explicit user-requested exports go under
<active-workspace>/exports/; - project source remains in its project root;
- existing user files are never moved or deleted without explicit approval.
Resolve the active workspace from project instructions or the current working directory. If no safe workspace root is clear, ask before writing rather than defaulting to a personal home directory.
When to use
Use when:
- a task will create scripts, intermediate JSON/CSV/HTML, screenshots, downloads, report assets, or exports;
- the user asks to audit or clean generated files;
- generated artifacts appear in a high-level personal directory;
- a recurring job needs a predictable artifact and cleanup lifecycle;
- a report or export needs the correct destination.
Do not use for normal source edits inside an existing project, read-only inspection, or durable knowledge and policy files that already have an authoritative location.
Canonical workspace shape
<active-workspace>/
scratch/ temporary and intermediate artifacts
reports/ generated reports intended for reading or delivery
exports/ explicit user-requested exports
Prefer topic/profile subfolders:
scratch/<topic>/
reports/<report-class>/
exports/<task-slug>/
Do not create one-off files at a home-directory root. Do not move project-specific source into a generic scratch tree.
Operating rules
- Before writing: choose the narrowest appropriate workspace subfolder.
- Before cleanup: inspect the exact candidates and produce a manifest.
- Before moving or deleting existing files: obtain explicit approval for that manifest.
- Prefer reversible moves over deletion unless deletion is explicitly requested.
- Keep rollback possible: record source, destination, size, reason, and timestamp.
- Fail closed: missing, changed, moved, symlinked, or ambiguous targets require a fresh audit and approval.
- Do not expand scope: newly discovered or newly stale paths do not inherit an older approval.
- Report honestly: distinguish proposed, moved, deleted, skipped, and failed items.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 132 lines · 44 tokens per session scan A 715feda66079
hermes-workspace-hygiene is a skill published in the GitHub repository SaikaAco/saika-hermes-skills (2 stars, last pushed 1mo ago), licensed MIT. It adds 44 tokens to every session and 1,203 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
orbit-general
Open Orbit briefing skill — selected by the Orbit pipeline when the user has two or more connectors connected. Pulls the past 24 hours of activity from every authenticated connector (GitHub, Linear, Notion, Slack, 飞书, Calendar, Gmail, Drive, Sentry, Vercel, …) and renders a single adaptive bento-grid dashboard at the…
orbit-gmail
Open Orbit briefing skill — selected by the Orbit pipeline when Gmail is the user's only connected connector, or when the user explicitly scopes their daily digest to Gmail. Pulls the past 24 hours of inbox activity (replies awaited, mentions, cc, auto- categorized bulk) from the user's authenticated Gmail connection…
orbit-notion
Open Orbit briefing skill — selected by the Orbit pipeline when Notion is the user's only connected connector, or when the user explicitly scopes their daily digest to Notion. Pulls the past 24 hours of document edits, comments, mentions, and database row changes from the user's authenticated Notion connection and…
discovery-question-form
Structured clarification form for unresolved material requirements.
template-engine
Load, validate, and populate templates consistently across frameworks.
checkpoint
Create, list, or recover mid-workflow checkpoints so interrupted work resumes from a known-good position.