Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add adamwang99/NEUTRON-EVO-OS --skill auto-confirm-skill-levelgit clone --depth 1 https://github.com/adamwang99/NEUTRON-EVO-OSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/adamwang99/neutron-evo-os/auto-confirm-skill-level)<a href="https://agentmods.dev/skills/adamwang99/neutron-evo-os/auto-confirm-skill-level"><img src="https://agentmods.dev/badge/skills/adamwang99/neutron-evo-os/auto-confirm-skill-level/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/adamwang99/neutron-evo-os/auto-confirm-skill-level"><img src="https://agentmods.dev/badge/skills/adamwang99/neutron-evo-os/auto-confirm-skill-level.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00005 | $0.00382 |
| Opus 5 | $0.00003 | $0.00191 |
| Sonnet 5 | $0.00001 | $0.00076 |
| Haiku 4.5 | $0.00001 | $0.00038 |
Grade A, and why
auto-confirm-skill-level scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Learned Skill: Auto-Confirm Enforcement at SKILL.md Level
Pattern
When implementing an auto-confirm/config system, the configuration exists but the AI doesn't read it because it's only checked at the Python execution layer (skill_execution.run()), not at the SKILL.md layer that Claude Code reads directly. Claude Code reads SKILL.md files to understand what to do — it never calls skill_execution.run() during normal chat. Fix: add FIRST STEP sections to SKILL.md files that tell the AI to check the config file before presenting gates.
When to Apply
- Implementing any "auto" or "skip" mode for a workflow gate
- Adding configuration that should control AI behavior
- Making sure a Python config layer is actually enforced by the AI itself
Example
Problem: Auto-confirm config exists at memory/.auto_confirm.json, Python code checks it, but Claude Code ignores it because it doesn't run the Python code during chat.
Fix applied:
## ⚡ FIRST STEP: Check Auto-Confirm Status
**BEFORE doing anything else**, check if auto-confirm is enabled:
1. Read memory/.auto_confirm.json
2. If {"enabled": true}: → skip the gate
3. Only present gate UI if auto-confirm is FALSE
Also update CLAUDE.md (loaded first) with the same check.
Notes
Realized during Phase 6 (2026-04-01) when user complained auto-confirm wasn't working despite being enabled. Root cause: AI reads CLAUDE.md + SKILL.md for guidance, not Python code. Solution: embed the check in the docs the AI actually reads.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 38 lines · 5 tokens per session scan A 72bebea22fee
auto-confirm-skill-level is a skill published in the GitHub repository adamwang99/NEUTRON-EVO-OS (20 stars, last pushed 5mo ago), licensed MIT. It adds 5 tokens to every session and 382 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
metago-expert-agent-lifecycle-manager
An expert role that manages an AI agent through its full lifecycle, from defining its requirements and abilities to packaging, testing, deploying, upgrading, and retiring it. It also designs how multiple agents work together.
metago-security-audit
A security review skill based on the OWASP Top 10, a commonly used list of major web-application security risks. It checks code, dependencies, configuration, authentication, and data handling.
metago-compliance
A pre-task checklist for checking legal, ethical, and security concerns before acting. It covers privacy, copyright, permissions, sensitive data, system safety, and regional compliance requirements.
metago-delivery-gate
A delivery checklist for software work that links each requirement to code, tests, and proof that the result looks right. It includes screenshot comparison, where a new image is checked against a reference image.
metago-expert-dcv-economist
An expert role for measuring how people, teams, or projects contribute value using a six-part scoring model. It also evaluates credit, balance, and possible contribution risks from records such as work logs and output data.
metago-expert-industrial-interconnect-engineer
An industrial-connectivity engineering guide for linking factory equipment such as PLCs, CNC machines and sensors to software systems. It covers industrial communication protocols, digital twins, operational-technology security and compliance standards.