Use this skill to determine whether a task crosses an approval boundary and what should happen before any execution proceeds.
Trigger boundary
Use this skill when:
a task may be destructive, operationally sensitive, or security-relevant
the current authority level is unclear
the agent needs to classify whether the next step is safe, explicit-only, or out of bounds
Do not use this skill when:
the task is clearly low-risk and already bounded by an ordinary workflow
no meaningful approval boundary exists in the current context
the authority is already clear and the main need is choosing a preview path before execution; use aoa-dry-run-first
the task is only about preparing a public-safe artifact for sharing; use aoa-sanitized-share
Inputs
requested action
touched surfaces
known approval state
risk signals
possible fallback or inspect-only path
Outputs
classification of the action: safe to proceed, explicit approval required, or do not execute
note on whether explicit approval is needed
bounded next-step recommendation
report of unresolved authority assumptions
Procedure
identify the requested action and touched surfaces
assess whether the action could be destructive, sensitive, or authority-gated
classify the action as safe to proceed, explicit-approval required, or not appropriate to execute
prefer inspect-only or bounded alternatives when authority is insufficient
report the classification and the reason for it
Contracts
unclear authority should not be silently interpreted as permission
classification should be explicit and reviewable
safer bounded alternatives should be preferred when possible
the result should reduce accidental overreach
Risks and anti-patterns
assuming approval because a task sounds routine
collapsing several risk levels into a single vague warning
using approval logic to avoid useful bounded analysis
hiding destructive steps behind innocent labels
Verification
confirm the touched surfaces were identified
confirm the approval need was classified explicitly rather than as a vague warning
confirm the next step fits the stated authority level
confirm uncertainty was not masked as permission
Technique traceability
Manifest-backed techniques:
AOA-T-PENDING-APPROVAL-GATE-CHECK from 8Dionysus/aoa-techniques at TBD using path TBD and sections: Intent, When to use, Inputs, Outputs, Core procedure, Contracts, Risks, Validation
Adaptation points
Future project overlays may add:
local authority models
local risk categories
approval examples
repository-specific explicit-only rules
1---2name: aoa-approval-gate-check3description: aoa-approval-gate-check4---56# aoa-approval-gate-check78## Intent910Use this skill to determine whether a task crosses an approval boundary and what should happen before any execution proceeds.1112## Trigger boundary1314Use this skill when:15- a task may be destructive, operationally sensitive, or security-relevant16- the current authority level is unclear17- the agent needs to classify whether the next step is safe, explicit-only, or out of bounds1819Do not use this skill when:20- the task is clearly low-risk and already bounded by an ordinary workflow21- no meaningful approval boundary exists in the current context22- the authority is already clear and the main need is choosing a preview path before execution; use `aoa-dry-run-first`23- the task is only about preparing a public-safe artifact for sharing; use `aoa-sanitized-share`2425## Inputs2627- requested action28- touched surfaces29- known approval state30- risk signals31- possible fallback or inspect-only path3233## Outputs3435- classification of the action: safe to proceed, explicit approval required, or do not execute36- note on whether explicit approval is needed37- bounded next-step recommendation38- report of unresolved authority assumptions3940## Procedure41421. identify the requested action and touched surfaces432. assess whether the action could be destructive, sensitive, or authority-gated443. classify the action as safe to proceed, explicit-approval required, or not appropriate to execute454. prefer inspect-only or bounded alternatives when authority is insufficient465. report the classification and the reason for it4748## Contracts4950- unclear authority should not be silently interpreted as permission51- classification should be explicit and reviewable52- safer bounded alternatives should be preferred when possible53- the result should reduce accidental overreach5455## Risks and anti-patterns5657- assuming approval because a task sounds routine58- collapsing several risk levels into a single vague warning59- using approval logic to avoid useful bounded analysis60- hiding destructive steps behind innocent labels6162## Verification6364- confirm the touched surfaces were identified65- confirm the approval need was classified explicitly rather than as a vague warning66- confirm the next step fits the stated authority level67- confirm uncertainty was not masked as permission6869## Technique traceability7071Manifest-backed techniques:72- AOA-T-PENDING-APPROVAL-GATE-CHECK from `8Dionysus/aoa-techniques` at `TBD` using path `TBD` and sections: Intent, When to use, Inputs, Outputs, Core procedure, Contracts, Risks, Validation7374## Adaptation points7576Future project overlays may add:77- local authority models78- local risk categories79- approval examples80- repository-specific explicit-only rules
Run npx skillmds@latest add majiayu000/aoa-approval-gate-check in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
aoa-approval-gate-check It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.