Form Filler Operator Skill
Forms are where an hour of a professional's day goes to die: the same facts, retyped into someone else's boxes. This skill runs the retyping through a computer-use agent — with the discipline the task actually needs: facts come from an approved sheet (never invented), every field write is logged, and the submit button belongs to the human. (Reading the form's fine print first? That's tos-decoder's job — chain them.)
What This Skill Produces
- The fact sheet — every fact the form needs, gathered once, confirmed before any filling
- The mapping — form field → fact → source, including fields with no matching fact (asked, never guessed)
- The filled form, held at review — completed up to (never through) the submission step
- The transcript — field-by-field record of what was entered where
Required Inputs
Ask for these if not provided:
- The form — URL or document, and any login the user has already established
- The facts — documents/profile to draw from (or interview the user to build the sheet)
- Sensitivity rules — which fields (SSN/passport/banking) require the user to type them personally; default: ALL such fields are user-typed
- The deadline and stakes — a visa application and a newsletter signup deserve different paranoia
Framework
- Sheet before form: all facts assembled and user-confirmed first; mid-form invention is how wrong data gets submitted.
- Map, then fill: every field mapped to a fact + source; unmapped fields become questions batched to the user — one interruption, not twenty.
- Sensitive-field floor: identity, financial, and medical fields are never agent-typed unless the user explicitly overrides, field by field.
- Checkpoint pages: multi-page forms get a per-page pause-and-verify against the mapping before proceeding.
- The held-at-review rule: the run ends at the review/submit screen with a screenshot; pressing submit is the user's hand or an explicit word-level go.
Output Format
Form Run: [form name] — [date]
Fact sheet: [n] facts confirmed · Fields: [n] mapped, [n] user-typed (sensitive), [n] open questions
| Field |
Entered |
Fact source |
| Status: held at review — [screenshot] — awaiting your submit. |
|
|
Quality Checks
Anti-Patterns
Execution
For computer-use agents with browser control. Without tools, the fact sheet + mapping is the deliverable (still worth an hour). Rules per SKILLSPEC.md §5.
Preconditions
- The fact sheet confirmed by the user; the mapping approved; sensitivity rules acknowledged.
- The user is present (or reachable) for sensitive fields, CAPTCHAs, and the final submit.
- For logged-in forms: the session was established by the user, not the agent.
Allowed actions
- Navigate the named form; enter mapped facts into their fields; upload documents the user staged for this run.
- Pause at each page checkpoint and at every sensitive field; screenshot at each checkpoint.
- Stop at the review/submit screen.
- Nothing else: no submitting, no account creation, no payment entry, no accepting agreements, no navigating beyond the named form.
Verification
- At review: read back every field from the form itself against the mapping; list any field the form transformed (formatting, truncation).
- Deliver the transcript + review screenshot.
Rollback
- Unsubmitted forms roll back by closing the session (nothing was committed).
- Stop and ask a human if: a field rejects a mapped fact, the form's structure changes mid-run, an unexpected identity/payment step appears, or anything requires agreement acceptance.
1---2name: form-filler-operator3description: Fill long web forms and applications through a computer-use agent — from a fact sheet you approve, field by field, with a full transcript and nothing submitted without your word. Use when asked to fill this application for me, complete this government/vendor/insurance form, or do this registration. Produces the fact-to-field mapping, the filled form held at review, and a field-level transcript.4---5
6# Form Filler Operator Skill
7
8Forms are where an hour of a professional's day goes to die: the same facts, retyped into someone else's boxes. This skill runs the retyping through a computer-use agent — with the discipline the task actually needs: facts come from an approved sheet (never invented), every field write is logged, and the submit button belongs to the human. (Reading the form's fine print first? That's `tos-decoder`'s job — chain them.)
9
10## What This Skill Produces
11
12- **The fact sheet** — every fact the form needs, gathered once, confirmed before any filling
13- **The mapping** — form field → fact → source, including fields with *no* matching fact (asked, never guessed)
14- **The filled form, held at review** — completed up to (never through) the submission step
15- **The transcript** — field-by-field record of what was entered where
16
17## Required Inputs
18
19Ask for these if not provided:
20- **The form** — URL or document, and any login the user has already established
21- **The facts** — documents/profile to draw from (or interview the user to build the sheet)
22- **Sensitivity rules** — which fields (SSN/passport/banking) require the user to type them personally; default: ALL such fields are user-typed
23- **The deadline and stakes** — a visa application and a newsletter signup deserve different paranoia
24
25## Framework
26
271. **Sheet before form:** all facts assembled and user-confirmed first; mid-form invention is how wrong data gets submitted.
282. **Map, then fill:** every field mapped to a fact + source; unmapped fields become questions batched to the user — one interruption, not twenty.
293. **Sensitive-field floor:** identity, financial, and medical fields are never agent-typed unless the user explicitly overrides, field by field.
304. **Checkpoint pages:** multi-page forms get a per-page pause-and-verify against the mapping before proceeding.
315. **The held-at-review rule:** the run ends at the review/submit screen with a screenshot; pressing submit is the user's hand or an explicit word-level go.
32
33## Output Format
34
35# Form Run: [form name] — [date]
36**Fact sheet:** [n] facts confirmed · **Fields:** [n] mapped, [n] user-typed (sensitive), [n] open questions
37| Field | Entered | Fact source |
38|---|---|---|
39**Status:** held at review — [screenshot] — awaiting your submit.
40
41## Quality Checks
42- [ ] Zero fields filled from inference — every entry traces to the confirmed sheet
43- [ ] All sensitive fields were user-typed or explicitly overridden one by one
44- [ ] Open questions were batched, not guessed
45- [ ] The run ended held-at-review with visual proof
46
47## Anti-Patterns
48- [ ] Do not guess a field to keep momentum — a wrong passport number costs weeks
49- [ ] Do not accept ToS/declarations on the user's behalf — decode them (`tos-decoder`) and put the checkbox in the user's hands
50- [ ] Do not autofill from a browser profile — the confirmed sheet is the only source
51- [ ] Do not treat CAPTCHAs or identity checks as obstacles to defeat — they're the user's to complete, by design
52
53## Execution
54
55For computer-use agents with browser control. Without tools, the fact sheet + mapping is the deliverable (still worth an hour). Rules per [SKILLSPEC.md §5](../../SKILLSPEC.md).
56
57### Preconditions
58- The fact sheet confirmed by the user; the mapping approved; sensitivity rules acknowledged.
59- The user is present (or reachable) for sensitive fields, CAPTCHAs, and the final submit.
60- For logged-in forms: the session was established by the user, not the agent.
61
62### Allowed actions
63- Navigate the named form; enter mapped facts into their fields; upload documents the user staged for this run.
64- Pause at each page checkpoint and at every sensitive field; screenshot at each checkpoint.
65- Stop at the review/submit screen.
66- Nothing else: **no submitting, no account creation, no payment entry, no accepting agreements, no navigating beyond the named form.**
67
68### Verification
69- At review: read back every field from the form itself against the mapping; list any field the form transformed (formatting, truncation).
70- Deliver the transcript + review screenshot.
71
72### Rollback
73- Unsubmitted forms roll back by closing the session (nothing was committed).
74- Stop and ask a human if: a field rejects a mapped fact, the form's structure changes mid-run, an unexpected identity/payment step appears, or anything requires agreement acceptance.