Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add blackzhanzhan/Cyber-Ming-Protocol --skill approval-first-plannergit clone --depth 1 https://github.com/blackzhanzhan/Cyber-Ming-ProtocolWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/blackzhanzhan/cyber-ming-protocol/approval-first-planner)<a href="https://agentmods.dev/skills/blackzhanzhan/cyber-ming-protocol/approval-first-planner"><img src="https://agentmods.dev/badge/skills/blackzhanzhan/cyber-ming-protocol/approval-first-planner/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/blackzhanzhan/cyber-ming-protocol/approval-first-planner"><img src="https://agentmods.dev/badge/skills/blackzhanzhan/cyber-ming-protocol/approval-first-planner.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00064 | $0.02270 |
| Opus 5 | $0.00032 | $0.01135 |
| Sonnet 5 | $0.00013 | $0.00454 |
| Haiku 4.5 | $0.00006 | $0.00227 |
Grade A, and why
approval-first-planner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 184 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Approval-First Planner
Prerequisite: read and obey the repository parent policy at skill/global_rules/SKILL.md first.
Use When
- The user asks to implement, fix, refactor, modify, or take over a task that will change files.
- The user wants a plan before edits.
- The request may be phrased in plain register, imperial register, Chinese, or English.
Goal
- Convert a task request into an executable, auditable, approval-first contract.
- Expose boundaries before any edits begin.
- Make the boundary model explicit enough that execution can continue continuously until a real red line is crossed.
- Keep the contract attached to a visible campaign tree rather than letting local replans silently replace the mainline.
Output Contract
Your response must stop before editing and must include:
- A short stop-before-edit notice.
- A Markdown table titled
Minimal Atomic Execution Contractfor English users or最小改动原子执行合同for Chinese users. - A YAML block titled
Boundary Conditions And Test-Case Key Mapfor English users or边界条件与测试用例键值对for Chinese users. - An explicit approval gate.
Required Table Shape
Each atomic slice must expose at least these fields:
Slice IDObjectiveAllowed FilesDo Not TouchRed LineGreen TestsAcceptance LadderCommit ActionCommit UnitCommit MessageTarget ArtifactsAffected Architecture NodesArchitecture DeltaAmendment RequiredAffected Data EntitiesData Model DeltaER Amendment RequiredMigration RequiredBackfill Required
Required YAML Shape
The acceptance YAML block must not collapse governance red lines and white-box test chains into one blur.
It must distinguish:
- governance-layer
red_line - white-box
assertions - white-box
red_test - white-box
green_test same_case_requirementphysical_evidenceaffected_architecture_nodesunchanged_architecture_nodesarchitecture_deltarequires_architecture_amendmentaffected_data_entitiesunchanged_data_entitiesdata_model_deltarequires_er_amendmentmigration_requiredbackfill_required
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 184 lines · 64 tokens per session scan A 12400f8f382f
approval-first-planner is a skill published in the GitHub repository blackzhanzhan/Cyber-Ming-Protocol (56 stars, last pushed 4mo ago), licensed MIT. It adds 64 tokens to every session and 2,270 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
loop-execution
Use when executing an existing HOTL workflow file — reads steps, loops until success criteria met, auto-approves low-risk gates, pauses at high-risk gates.
executing-plans
Use when executing an implementation plan linearly with explicit human checkpoints between batches of tasks.
brainstorming
Use before any feature work — explores intent, requirements, and design. Produces HOTL contracts (intent, verification, governance) before implementation.
pr-reviewing
Review a PR across multiple dimensions — description, code changes, code scan, unit tests — using parallel subagents. Supports GitHub, GitLab, and enterprise platforms.
subagent-execution
Delegated step runner over the HOTL execution state machine — delegates eligible steps to fresh subagents while the controller keeps governance, verification, and stop conditions.
writing-plans
Use after design approval to create a dated executable workflow file with bite-sized tasks, exact file paths, and loop/gate definitions.