A worker-agent role for carrying out one assigned stage of a workflow. It loads the shared operating rules and the runtime instructions for the coding platform in use.

It is for executing the hands-on work assigned by a workflow dispatcher during a specific stage.

It gives dispatched workers a common procedure for starting their assignment and adapting it to Claude Code, Codex, or Pi.

ensign — Skill by spacedock-dev

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/spacedock-dev/spacedock/ensign

Any agent

npx skills add spacedock-dev/spacedock --skill ensign

Clone the repo

git clone --depth 1 https://github.com/spacedock-dev/spacedock

Made for: Claude Code, Codex.

Or install spacedock, the plugin that ships this one along with the rest of its 11 skills, 2 agents.

Per session 12 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 143 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00012	$0.00143
Opus 5	$0.00006	$0.00072
Sonnet 5	$0.00002	$0.00029
Haiku 4.5	$0.00001	$0.00014

Measured 3d ago against content hash f20f496405dc, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

ensign scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/ensign/SKILL.md · 18 lines

What it actually says

Operating contract

@references/ensign-shared-core.md

Runtime adapter

Load the runtime adapter for your platform:

Claude Code (CLAUDECODE env var is set): read references/claude-ensign-runtime.md
Codex (CODEX_THREAD_ID env var is set): read references/codex-ensign-runtime.md
Pi (PI_CODING_AGENT_DIR is set, or this session is running under Pi without the Claude/Codex markers above): read references/pi-ensign-runtime.md

Then read your assignment and begin work.

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago First seen · 18 lines · 12 tokens per session scan A f20f496405dc

Subscribe to this mod's changes

ensign is a skill published in the GitHub repository spacedock-dev/spacedock (75 stars, last pushed 4d ago), licensed Apache-2.0. It adds 12 tokens to every session and 143 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Building agents agent-orchestration agent-workflow ai-agents claude-code markdown

fleet

Parallel campaign orchestrator. Runs multiple campaigns in coordinated waves within a single session. Spawns 2-3 agents per wave in isolated worktrees, collects discoveries, shares context between waves. Use when work decomposes into 3+ independent streams that can run simultaneously.

SethGammon/Citadel · 56 tokens

archon

Autonomous multi-session campaign agent. Decomposes large work into phases, delegates to sub-agents, reviews output, and maintains campaign state across context windows. Use for work that spans multiple sessions and needs persistent state, quality judgment, and strategic decomposition.

SethGammon/Citadel · 54 tokens

setup

First-run experience for the harness. Three modes: Recommended (guided, 3 min), Full Tour (guided + skill walkthrough, 8 min), and Express (zero questions, 30 sec). Installs hooks first, detects stack, configures harness.json, runs a live demo on real code, and prints a reference card.

SethGammon/Citadel · 69 tokens

daemon

Continuous autonomous operation mode. Keeps campaigns running 24/7 by chaining Claude Code sessions via RemoteTrigger. Each session picks up from the campaign's continuation state, works until context runs low or the phase completes, then schedules the next session. Auto-stops on campaign completion or budget…

SethGammon/Citadel · 69 tokens

dashboard

Real-time harness observability dashboard. Reads campaigns, fleet sessions, telemetry, and pending queues to present a snapshot of harness state at a glance. Invoked by /dashboard, /do status, or phrases like "what's happening" and "show activity".