メニュー
How to handle privileged tool calls that require explicit admin approval (ACT-XXXXXX tokens, optional TOTP 2FA). Load this when a tool returns an action token or when the user replies 'Approve ACT-...'.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/misunders2d/ori --skill approval-skillコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Working memory protocol for multi-step tasks. Use the scratchpad to record intermediate findings without bloating LLM context.
How to schedule one-off and recurring agent tasks, route their delivery to specific Slack/Telegram channels, and use plan enforcement reliably. Load this any time the user asks to remind, schedule, automate, or run something on a cron.
How to add, list, or remove API keys and OAuth integrations through the chat. Load this when the user asks to add/set/configure/connect a key, token, credential, or third-party service (Slack, Telegram, OpenRouter, Anthropic, Google, GitHub, ClickUp, …).
SOC 職業分類に基づく
SKILL.md を表示中
| name | approval-skill |
| description | How to handle privileged tool calls that require explicit admin approval (ACT-XXXXXX tokens, optional TOTP 2FA). Load this when a tool returns an action token or when the user replies 'Approve ACT-...'. |
Privileged actions (delete, force-push, mass-modify, send-public-message, etc.) don't execute immediately. The plugin layer (AdminGatePlugin) intercepts the tool call and returns an action token instead.
When a privileged tool is invoked, the response is something like:
Action requires approval. Token: ACT-A7B3F9
Summary: <human-readable description of what will happen>
To approve: send "Approve ACT-A7B3F9" (and your 6-digit code if 2FA is enabled).
The actual tool has not run yet. The action is queued in data/pending_actions.db.
Relay the token + summary to the user verbatim. Don't summarize the summary further; the user needs to know exactly what they're approving.
Wait for the user to reply with Approve ACT-XXXXXX (case-insensitive, in any language) or to cancel.
When they approve, call:
execute_approved_action(token="ACT-A7B3F9")
# Or with TOTP if enabled:
execute_approved_action(token="ACT-A7B3F9", totp_code="123456")
Relay the result back.
If ADMIN_TOTP_SECRET is set in the vault and REQUIRE_2FA=true, the user must include a 6-digit TOTP code with their approval. Pass both token and totp_code to execute_approved_action.
If they forget the code, the approval is rejected — ask for both again.
AdminGatePlugin will just issue another token.If the user says "cancel" or "no" before approving:
pending_actions.db).