Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add PandaDoc/mcp-server-guide --skill pandadoc-approval-sendgit clone --depth 1 https://github.com/PandaDoc/mcp-server-guideWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pandadoc/mcp-server-guide/pandadoc-approval-send)<a href="https://agentmods.dev/skills/pandadoc/mcp-server-guide/pandadoc-approval-send"><img src="https://agentmods.dev/badge/skills/pandadoc/mcp-server-guide/pandadoc-approval-send/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/pandadoc/mcp-server-guide/pandadoc-approval-send"><img src="https://agentmods.dev/badge/skills/pandadoc/mcp-server-guide/pandadoc-approval-send.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.04226 |
| Opus 5.5 | $0.00025 | $0.01690 |
| Sonnet 5.5 | $0.00013 | $0.00845 |
| Haiku 4.5 | $0.00006 | $0.00423 |
Grade A, and why
pandadoc-approval-send scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 339 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PandaDoc Approval-Routed Send
Send a document through internal approval instead of straight to the counterparty.
Verified against live chains. Reading a chain and routing a document through it were both exercised
end to end: a Draft created from a template with an approval workflow exposes a populated
approval_execution, and sending it lands the document in Waiting for Approval. One shape cannot be
sent at all — a group whose type is selectable — and Step 3 explains why and what to do instead.
Prerequisites
The PandaDoc MCP Server must be connected. Required tools: PandaDoc:templates_list, PandaDoc:templates_details_get,
PandaDoc:documents_create, PandaDoc:documents_status_get, PandaDoc:documents_details_get, PandaDoc:documents_send. Useful:
PandaDoc:documents_update to fix an unassigned signature field before retrying a send. If they are missing,
say so and point at https://mcp.pandadoc.com.
An approval workflow must be configured on the template or document in PandaDoc. This skill cannot create one: no MCP tool exposes approval-chain configuration, only reading a chain and routing a document through it. Configuring one is a UI action in PandaDoc.
How approvals appear in the API
PandaDoc:documents_details_get returns approval_execution. It is null when no approval workflow applies
to the document. When populated it looks like this:
{
"next_step": "<step id>",
"is_completed": false,
"is_ordering_enabled": true,
"is_editing_allowed": false,
"sender": { "email": "[email protected]", "id": "<user id>" },
"sender_message": "Please review and approve",
"skip_user": null,
"skip_message": null,
"steps": [ /* see below */ ]
}
A step comes in one of two shapes
Group step — a named group, with one or more candidate assignees:
{
"id": "<step id>",
"assignee": null,
"group": {
"id": "<group id>",
"name": "Finance",
"type": "optional",
"assignees": [
{ "id": "<assignee id>", "user": { "email": "[email protected]", "id": "<user id>" }, "is_document_sender": false }
]
},
"conditions": [], "condition_operator": "or",
"approve_user": null, "approve_message": null,
"reject_user": null, "reject_message": null,
"is_skipped": false, "skip_reason": null
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed 5746793b4158
- 12d ago Changed · +196 lines · +12 tokens per session 4b1678f925e1
- 1mo ago First seen · 143 lines · 51 tokens per session scan A 4aa04fe735dc
pandadoc-approval-send is a skill published in the GitHub repository PandaDoc/mcp-server-guide (2 stars, last pushed 2d ago), licensed MIT. It adds 63 tokens to every session and 4,226 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.
Other skills, from other repositories
e-signature
Use when wiring an e-signature flow with DocuSign or Dropbox Sign — picking the SES/AES/QES legal tier, sending a PDF or template for signature, embedded signing, verifying signing webhooks, retrieving the signed PDF plus audit trail. NOT drafting contract text (that is contracts), NOT extracting fields from PDFs…
shopify-app-store-review
Run a pre-submission compliance check against your Shopify app's codebase. Reviews App Store requirements and surfaces likely issues before you submit for official review.
jotform-sign
Prepare or edit a contract, agreement, NDA, or consent document, set the signers, send a signature invitation when asked, or check who has signed. Use when the user wants something signed. A form, survey, or RSVP is not a signing document.
data-breach-blast-radius
Pre-breach impact analysis: inventories sensitive data (PII, PHI, PCI-DSS, credentials), traces data flows, scores exposure vectors, and produces a regulatory blast radius report with fine ranges sourced verbatim from GDPR Art. 83, CCPA § 1798.155(a), and HIPAA 45 CFR § 160.404. Cost benchmarks from IBM Cost of a Data…
flowstudio-power-automate-governance
Govern Power Automate flows and Power Apps at scale using the FlowStudio MCP cached store. Classify flows by business impact, detect orphaned resources, audit connector usage, enforce compliance standards, manage notification rules, and compute governance scores — all without Dataverse or the CoE Starter Kit. Load…
agent-owasp-compliance
Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: Evaluating an agent system's security posture before production deployment Running a compliance check against OWASP ASI 2026 standards Mapping existing security controls to the 10 agentic risks Generating…