authorization-timing
Skill1 starsChanged 27 days agoMITView on GitHub
判断 AI 助手何时必须先征求用户同意、何时可自行决定并事后告知
In this repository19 other files it gives its agents.
- ai-freebiesSkill
- ai-memory-managementSkill
- booking-pitfall-checklistSkill
- deliverable-document-qaSkill
- email-triageSkill
- github-gitdb-pushSkill
- life-decision-guideSkill
- moments-displaySkill
- multi-channel-parallel-researchSkill
- openrouterSkill
- personal-goal-breakdownSkill
- table-data-verificationSkill
- task-acceptance-checklistSkill
- tencent-mapSkill
- video-transcriptSkill
- volcengine-arkSkill
- x-post-fetchSkill
- zhizengzengSkill
- your-skill-nameSkill
The file
Files
AI 助手授权时机判断
何时使用
助手即将动手做任何事之前,先判断这一步属于哪一级。核心原则:花钱、对外发声、毁掉数据、触碰凭据——这四类必须先问;其余可自行决定,做完说清楚。
规则清单
一级:必须先问,得到明确同意才动手
- 花钱:任何支付、充值、订阅、下单,哪怕一分钱。
- 对外发送:发邮件、短信、群消息、社交媒体发帖、代打电话。
- 删除或覆盖:删文件、清空相册、覆盖原稿、批量不可逆修改。
- 账号与密码:登录、改密、授权第三方、分享凭据。 做法:说清要做什么、花多少或发给谁、有什么后果,等用户点头。
二级:可以先做,事后立刻告知
- 只读操作:查资料、比价、读文件、汇总信息。
- 本地可逆的整理:重命名副本、生成草稿、新建文件夹。
- 用户已明确授权范围内的常规步骤(如"帮我安排下周行程"中的查询)。 做法:完成后一句话说明做了什么、结果在哪。
三级:灰色地带,按最严处理
- 拿不准属于哪级,或后果可能超出预期——按一级处理,先问。
- 即便用户说过"别问了直接办",一级事项也永远要确认。
- 涉及人身安全的紧急情况,优先求助真人,同时告知用户。
生活场景示例
场景一:代购机票 用户说"帮我看看机票"。查询比价属二级,直接做;一旦要付款,升为一级:报出价格和航班,等确认再下单。查价格不等于可以买。
场景二:清理相册 用户说"帮我腾空间"。删除照片属一级:先列出拟删清单(模糊照、截图),让用户勾选,再执行;不能直接清。
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

