ha-workflow-script

ha-workflow-script is a skill for Claude Code from shiwenwen/hope-agent. It costs 44 tokens per session (950 once invoked), scanned A, original, MIT.

A scripting guide for creating durable workflow runs that can be resumed, observed, and completed with a clear result.

In plain words
What is it for?
Use it to write or repair workflow.js scripts with typed child results, bounded parallel or pipeline steps, execution budgets, replay-safe behavior, and staged completion.
Why use it?
It helps prevent unreliable runs caused by changing operation identities, uncontrolled parallel work, hidden randomness, or unsupported system access.

Skill for Claude Code

Written for Claude Code: paths in frontmatter.

Good fit Use it to write or repair workflow.js scripts with typed child results, bounded parallel or pipeline steps, execution budgets, replay-safe behavior, and staged completion.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/shiwenwen/hope-agent/ha-workflow-script
About the project

Hope Agent is a cross-device personal AI assistant that remembers context, uses tools, and continues working toward goals through dynamically organized workflows. Individuals use it from desktop, web, server, or messaging environments to manage projects, knowledge, designs, and long-running tasks. The catalogue add-ons extend its agent workflows and capabilities.

shiwenwen/hope-agent · 1,553 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add shiwenwen/hope-agent --skill ha-workflow-script
Clone the repo
git clone --depth 1 https://github.com/shiwenwen/hope-agent

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ha-workflow-script

README.md
[![agentmods](https://agentmods.dev/badge/skills/shiwenwen/hope-agent/ha-workflow-script.svg)](https://agentmods.dev/skills/shiwenwen/hope-agent/ha-workflow-script)
Your own site
<a href="https://agentmods.dev/skills/shiwenwen/hope-agent/ha-workflow-script"><img src="https://agentmods.dev/badge/skills/shiwenwen/hope-agent/ha-workflow-script.svg" alt="Measured on agentmods" height="20"></a>
Per session 44 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 950 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00044 $0.00950
Opus 5 $0.00022 $0.00475
Sonnet 5 $0.00009 $0.00190
Haiku 4.5 $0.00004 $0.00095

Measured 8d ago against content hash a1c3225a0437, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

ha-workflow-script scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/ha-workflow-script/SKILL.md · 99 lines

How it starts

The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Hope Workflow Script

Use this for script-first dynamic Workflow authoring or repair. Workflow Mode lets the model decide whether orchestration helps; the user should not need to write workflow.js or enter a special coding mode.

Boundary

  • A Workflow is one durable, observable execution run.
  • A Goal owns the durable outcome and completion criteria.
  • A Loop schedules another trigger; do not implement recurrence inside a Workflow script.
  • Task handles expose progress; they are not op identities.
  • Permissions, approvals, isolation, quotas, and closure gates are enforced by the runtime, not by this text.

Deterministic Runtime

  • Export default async function main(workflow) and finish with workflow.finish(result).
  • Runtime op identity comes from deterministic execution position. label is display-only and never an id.
  • Keep the script hash fixed for a run. Edited-script resume may reuse only the safe matching prefix allowed by runtime provenance.
  • Use workflow.now() and workflow.random(seed) instead of ambient time or randomness.
  • No raw filesystem, process, environment, network, dynamic import, eval, or Function; use approved host APIs.
  1. Validate workflow.meta, workflow.args, scope, criteria, and budget.
  2. Create user-visible tasks and retain returned task handles.
  3. Observe current state through read/search host APIs.
  4. Choose sequential, parallel, or pipeline execution based on dependency shape and cost.
  5. Consume child results at useful checkpoints, steer or cancel when evidence changes, then run targeted validation.
  6. Finish with result, artifacts, verification, and residual risk.

Child Agents And Typed Results

  • Use outputSchema when the parent needs machine-consumable fields.
  • Keep schemaRetries bounded and reserve output tokens before spawn.
  • Treat repair output as structure repair, not permission to redo or expand the task.
  • Default write-capable work to isolated worktrees. Use isolation: "shared_read_only" only for genuinely read-only work; the runtime hard tool set is the security boundary.
  • Child completion is an input to synthesis, not proof that the Workflow or Goal is complete.

Read the full file on GitHub · 99 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 99 lines · 44 tokens per session scan A a1c3225a0437

Subscribe to this mod's changes

ha-workflow-script is a skill published in the GitHub repository shiwenwen/hope-agent (1,553 stars, last pushed today), licensed MIT. It adds 44 tokens to every session and 950 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

memory

Use this skill when Pioneer should proactively use durable memory or recalled context: decide whether memory can improve a turn, answer from remembered user/project facts, request memory tools, search/list/get stored memories, save durable preferences or project decisions, forget memories, audit or clean up memory, or…

pioneerdotai/pioneer · 64 tokens

subagents

Use this skill when Pioneer should delegate current-turn work to attached task-backed subagents, coordinate parallel child agents, wait for child results, review/revise/accept/cancel/detach attached work, or synthesize accepted child results into the parent answer.

pioneerdotai/pioneer · 54 tokens

tasks

Use this skill when Pioneer should create, inspect, update, reschedule, pause, resume, troubleshoot, or configure delivery for durable tasks, scheduled tasks, recurring tasks, interval tasks, cron jobs, background work, or existing task state.

pioneerdotai/pioneer · 50 tokens

browser

Headless web browsing: navigation, page inspection, interaction, data extraction, screenshots, PDFs, and browser session management.

pioneerdotai/pioneer · 26 tokens

technology-search

Search tech blogs, developer forums, and IT media (TechCrunch, Hacker News, 36氪, etc.) for software and hardware industry updates with heat ranking and EN↔CN translation. Use this skill only when the topic is clearly about programming, software, hardware, AI, or IT infrastructure.

netease-youdao/LobsterAI · 65 tokens

imap-smtp-email

Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Works with any IMAP/SMTP server including Gmail, Outlook, 163.com, vip.163.com, 126.com, vip.126.com, 188.com, and vip.188.com.

netease-youdao/LobsterAI · 82 tokens