Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CloudChef/atlasclaw-providers --skill preapproval-agentgit clone --depth 1 https://github.com/CloudChef/atlasclaw-providersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cloudchef/atlasclaw-providers/preapproval-agent)<a href="https://agentmods.dev/skills/cloudchef/atlasclaw-providers/preapproval-agent"><img src="https://agentmods.dev/badge/skills/cloudchef/atlasclaw-providers/preapproval-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cloudchef/atlasclaw-providers/preapproval-agent"><img src="https://agentmods.dev/badge/skills/cloudchef/atlasclaw-providers/preapproval-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.02947 |
| Opus 5 | $0.00015 | $0.01473 |
| Sonnet 5 | $0.00006 | $0.00589 |
| Haiku 4.5 | $0.00003 | $0.00295 |
Grade A, and why
preapproval-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 365 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Preapproval Agent
Autonomous backend agent for approval pre-review. Not a human confirmation flow.
Purpose
When triggered by a webhook:
- Fetch and analyze approval request details
- Evaluate request reasonableness with the shared pre-approval analysis contract
- Execute approve/reject via existing approval skills
- Return structured decision summary
Trigger Conditions
This skill activates when:
- Webhook payload targets approval pre-review
agent_identityisagent-approver- Valid
request_idis provided
Robot Admin Execution
For webhook-driven backend execution, AtlasClaw must select an explicit
SmartCMP provider instance and robot/admin credential in the Tool Context. If
that instance is not configured, execution must fail closed rather than
falling back to prod or another instance.
The robot provider instance should use a SmartCMP cmp_tk_* provider token
when available. SmartCMP Provider sends those tokens as
Authorization: Bearer <token> and keeps non-cmp_tk_* session tokens on the
existing CloudChef-Authenticate header.
Treat the webhook user as the AtlasClaw trigger identity, not as a CMP actor.
Approval execution uses smartcmp_preapproval_approve and
smartcmp_preapproval_reject; SmartCMP Provider resolves the selected robot
credential and SmartCMP actor.
Use this mode only for robot profiles whose allowed_skills include smartcmp:preapproval-agent. The same SmartCMP robot profile may also allow smartcmp:request-decomposition-agent when the same robot/admin account is approved for both workflows.
Inputs
| Input | Type | Required | Description |
|---|---|---|---|
provider_instance |
string | Yes | CMP provider instance name (e.g., cmp-prod) |
robot_profile |
string | For webhook robot mode | Robot profile configured on the selected provider instance |
agent_identity |
string | Yes | Must be agent-approver |
request_id |
string | Yes | Exact opaque SmartCMP Request ID returned by the pending-approval list |
trigger_source |
string | No | Source label (e.g., cmp-webhook) |
policy_mode |
string | No | Policy preset (default: balanced) |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 365 lines · 30 tokens per session scan A 6f29572d161a
preapproval-agent is a skill published in the GitHub repository CloudChef/atlasclaw-providers (15 stars, last pushed 5d ago), licensed Apache-2.0. It adds 30 tokens to every session and 2,947 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
use-agently
Discover (by searching) to use thousands of AI agents, MCP, tools, data sources, and APIs on the use-agently.com AI Agent Marketplace/Directory. You can get more effective "Web Search", "Web Fetch" or "Social Search" with use-agently. Sending messages via the A2A protocol, calling MCP tools, making HTTP/Web requests…
grizzly_sms
SMS verification and virtual phone numbers via Grizzly SMS API.
quality-assurance
A software quality and release-checking guide for reviewing code, testing applications, checking performance, and verifying delivery materials.
ci-cd-pipeline
A workflow for setting up CI/CD, meaning automated checks, builds, and deployments whenever code changes.
grizzly_sms
SMS verification and virtual phone numbers via Grizzly SMS API.
baoyu-image-gen
AI image generation with OpenAI, Google, DashScope and Replicate APIs. Supports text-to-image, reference images, aspect ratios. Sequential by default; parallel generation available on request. Use when user asks to generate, create, or draw images.