Token导航 LogoToken导航TokenDH.com
开发external-servicegithub未标认证来源可访问许可证需确认审计通过

agent-sop-authorAgentSOP 作者

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

1,139

周安装

47

GitHub Stars

935

下载量

372
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:agent-sop-author(AgentSOP 作者)
来源仓库:https://github.com/strands-agents/agent-sop
仓库路径:skills/agent-sop-author
安装命令:
npx skills add https://github.com/strands-agents/agent-sop --skill agent-sop-author
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/strands-agents/agent-sop --skill agent-sop-author

简介

用于创建和管理基于 Markdown 的标准操作流程(SOP)。

  • 适合构建复杂工作流自动化指南时使用。agent-sop-author 属于开发类 Skill,可作为该场景下的辅助能力补充。
  • 通过 GitHub 安装,支持参数化输入和约束执行。
  • 使用自然语言描述多步流程,兼容不同 AI 系统。
  • 需配合 RFC 2119 约束语法确保流程严谨性和可操作性。

SKILL.md

Agent SOP Author

Overview

Agent SOPs (Standard Operating Procedures) are markdown-based instruction sets that guide AI agents through sophisticated workflows using natural language, parameterized inputs, and constraint-based execution. This skill teaches you how to create (or update), structure, and validate Agent SOPs that work across different AI systems.

Usage

When working with Agent SOPs and need to:

  • Create new workflow automation SOPs
  • Update existing workflow automation SOPs
  • Structure multi-step agent workflows
  • Apply RFC 2119 constraints (MUST, SHOULD, MAY)
  • Validate SOP format and structure
  • Convert workflows into reusable templates
  • Ensure SOPs work across AI systems (Claude, Kiro, Cursor, etc.)

Core Concepts

What is an Agent SOP?

An Agent SOP is a standardized markdown file (.sop.md) that defines:

  • Clear objectives with detailed overviews
  • Parameterized inputs for flexible reuse
  • Step-by-step instructions with RFC 2119 constraints
  • Examples and troubleshooting for reliable execution
  • Multi-modal distribution (MCP tools, Anthropic Skills, Python modules)

Key Features

RFC 2119 Constraints: Use standardized keywords (MUST, SHOULD, MAY) to provide precise control over agent behavior without rigid scripting.

Parameterization: Accept parameters that customize behavior for different projects, teams, or requirements.

Resumability: Document progress as agents work, making it easy to understand and resume if interrupted.

Creating Agent SOPs

File Location

You MUST check for an agent-sops/ directory in the current working directory:

  • If agent-sops/ exists, You MUST write the SOP file there
  • If agent-sops/ does not exist, You MAY write the SOP in the current directory or ask the user where to save it

File Naming

You MUST follow these naming conventions:

  • Use .sop.md file extension
  • Use kebab-case for filenames (e.g., code-assist.sop.md, idea-honing.sop.md)
  • Choose descriptive names that indicate the SOP's purpose

Validation

You MUST run validate-sop.sh after EVERY change:

The validation script is located in the same directory as this SKILL.md file. When you read this skill, you will know the full path to SKILL.md, and the validation script is in that same directory.

<skill-directory>/validate-sop.sh path/to/your-sop.sop.md

You MUST fix all errors (❌) before proceeding. You SHOULD address warnings (⚠️) when possible.

Required Structure

Every Agent SOP MUST include these sections in order:

# [SOP Name]

## Overview
[Concise description of what the SOP does and when to use it]

## Parameters

- **required_param** (required): Description
- **optional_param** (optional, default: "value"): Description

**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined

## Steps
### 1. [Step Name]
Description of what happens in this step.

**Constraints:**
- You MUST [specific requirement]
- You SHOULD [recommended behavior]
- You MAY [optional behavior]

## Examples
[Concrete usage examples]

## Troubleshooting
[Common issues and solutions]

Parameters Section

You MUST define parameters using this format:

## Parameters

- **parameter_name** (required): Description of required input
- **another_param** (required): Description
- **optional_param** (optional): Description of optional input
- **with_default** (optional, default: "default_value"): Description

**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined

Parameter naming rules:

  • You MUST use lowercase letters
  • You MUST use underscores for spaces (snake_case)
  • You MUST be descriptive of purpose
  • You MUST list required parameters before optional ones

The Constraints for parameter acquisition section:

  • You MUST include this section in every Parameters section
  • You MUST include these directives:

- "If all required parameters are already provided, You MUST proceed to the Steps" - "If any required parameters are missing, You MUST ask for them before proceeding" - "When asking for parameters, You MUST request all parameters in a single prompt" - "When asking for parameters, You MUST use the exact parameter names as defined"

  • You MAY add additional constraints for flexible input methods:
**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined
- You MUST support multiple input methods including:
  - Direct input: Text provided directly
  - File path: Path to a local file
  - URL: Link to an internal resource
- You MUST use appropriate tools to access content
- You MUST confirm successful acquisition before proceeding
- You SHOULD save acquired data to a consistent location

Steps Section

You MUST structure steps with:

  1. Numbered heading (### 1., ### 2., etc.)
  2. Step name
  3. Natural language description
  4. Constraints: section with RFC 2119 keywords

Example:

### 1. Setup
Initialize the project environment and create necessary structures.

**Constraints:**
- You MUST validate directory structure exists
- You MUST create missing directories
- You MUST NOT proceed if directory creation fails
- You SHOULD log all setup actions
- You MAY skip validation if --force flag is provided

For conditional logic:

### 3. Conditional Processing
If validation passes, proceed with processing. Otherwise, report errors.

**Constraints:**
- You MUST check validation status before proceeding
- If validation passes, You MUST process the data
- If validation fails, You MUST report specific errors
- You MUST NOT continue with invalid data

RFC 2119 Keywords

You MUST use these keywords as defined in RFC 2119:

  • MUST / REQUIRED: Absolute requirement
  • MUST NOT / SHALL NOT: Absolute prohibition
  • SHOULD / RECOMMENDED: Strong recommendation (may have valid reasons to ignore)
  • SHOULD NOT / NOT RECOMMENDED: Strong discouragement (may have valid reasons to accept)
  • MAY / OPTIONAL: Truly optional item

Negative Constraints

You MUST provide context when using negative constraints:

Good (with context):

- You MUST NOT use ellipses (...) because your output will be read aloud by text-to-speech
- You SHOULD NEVER delete Git history files since this could corrupt the repository
- You MUST NOT run `git push` because this could publish unreviewed code

Bad (without context):

- You MUST NOT use ellipses
- You SHOULD NEVER delete Git files
- You MUST NOT run git push

Common contexts for negative constraints:

  • Technical limitations: "because the system cannot handle..."
  • Security risks: "since this could expose sensitive data..."
  • Data integrity: "as this could corrupt important information..."
  • User experience: "because users will be confused by..."
  • Compatibility: "since this breaks integration with..."
  • Performance: "as this could cause significant slowdowns..."

Examples Section

You SHOULD include concrete examples showing:

  • Example input parameters
  • Expected output or behavior
  • Common usage patterns
## Examples

### Example 1: Basic Usage
**Input:**
- task_description: "Create user authentication system"
- mode: "interactive"

**Expected Behavior:**
Agent will guide through TDD workflow, creating tests first, then implementation.

### Example 2: Automated Mode
**Input:**
- task_description: "Fix bug in payment processing"
- mode: "auto"

**Expected Behavior:**
Agent will automatically implement fix following established patterns.

Troubleshooting Section

You SHOULD include common issues and solutions:

## Troubleshooting

### Parameter Validation Fails
If parameter validation fails, check that:
- All required parameters are provided
- Parameter names use snake_case
- Values match expected types

### Step Execution Hangs
If a step appears to hang:
- Check for missing tool permissions
- Verify file paths are accessible
- Review constraint requirements

Interactive SOPs

For SOPs requiring user interaction:

  1. You SHOULD clearly indicate when user interaction is expected
  2. You MUST specify how to handle user responses
  3. You SHOULD specify where to save interaction records

Example:

### 2. Requirements Clarification
Guide the user through questions to refine their initial idea.

**Constraints:**
- You MUST ask one question at a time
- You MUST append each Q&A to "idea-honing.md"
- You SHOULD adapt follow-up questions based on previous answers
- You MUST continue until sufficient detail is gathered

Best Practices

You SHOULD follow these practices when authoring SOPs:

  1. Keep steps focused: Each step should accomplish one clear objective
  2. Use clear constraints: Be specific about requirements vs recommendations
  3. Provide examples: Show concrete usage for complex workflows
  4. Natural language: Write descriptions that are easy to understand
  5. Minimize complexity: Avoid deeply nested conditional logic
  6. Specify artifacts: Include file paths for all created artifacts
  7. Test thoroughly: Validate SOPs work across different AI systems
  8. Document edge cases: Include troubleshooting for common issues

Quick Reference

ElementFormatRequired
File extension.sop.mdYes
Title# SOP NameYes
Overview## OverviewYes
Parameters## ParametersYes
Steps## Steps with ### N.Yes
Constraints**Constraints:** with RFC 2119Yes
Examples## ExamplesRecommended
Troubleshooting## TroubleshootingRecommended

Common Patterns

Before: Unstructured Prompt

Please implement a user authentication system using TDD.
Make sure to write tests first and follow best practices.

After: Structured SOP

# Code Assist

## Overview
This SOP guides implementation using test-driven development.

## Parameters
- **task_description** (required): Description of task
- **mode** (optional, default: "interactive"): "interactive" or "auto"

## Steps
### 1. Setup
Initialize project environment.

**Constraints:**
- You MUST validate directory structure
- You MUST create test directory if missing
- You MUST NOT proceed if setup fails

### 2. Test Creation
Create tests based on requirements.

**Constraints:**
- You MUST write tests before implementation
- You SHOULD follow existing test patterns
- You MAY add additional edge case tests

Common Mistakes

Missing Context in Negative Constraints

Problem: Using MUST NOT without explaining why. Fix: Always provide context: "You MUST NOT X because Y"

Vague Parameter Descriptions

Problem: "input_data (required): The data" Fix: "input_data (required): JSON object containing user profile fields (name, email, role)"

Mixing Requirement Levels

Problem: Using MUST for optional behaviors or MAY for critical requirements. Fix: Use RFC 2119 keywords precisely - MUST for absolute requirements, SHOULD for recommendations, MAY for optional.

Missing Examples

Problem: Complex workflow without concrete usage examples. Fix: Include at least one complete example showing input parameters and expected behavior.

Overly Complex Steps

Problem: Single step trying to accomplish multiple objectives with nested conditionals. Fix: Break into multiple focused steps, each with clear constraints.

Visual Workflow

flowchart TD
    Start[Create SOP] --> Name[Choose descriptive name]
    Name --> Structure[Add required sections]
    Structure --> Overview[Write overview]
    Overview --> Params[Define parameters]
    Params --> Steps[Create steps with constraints]
    Steps --> Examples[Add examples]
    Examples --> Troubleshoot[Add troubleshooting]
    Troubleshoot --> Validate[Validate format]
    Validate --> Test[Test with AI agent]
    Test --> Done[Distribute SOP]

    style Start fill:#90EE90
    style Done fill:#90EE90
    style Validate fill:#FFB6C1

The Bottom Line

Agent SOPs transform complex workflows into reusable, shareable instructions that work across different AI systems. They use standardized markdown format with RFC 2119 constraints to provide precise control while preserving agent reasoning ability.

When creating SOPs, focus on clear structure, specific constraints with context, and concrete examples. Test thoroughly across different AI systems to ensure reliability.

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

35.42%
按下载量换算132

Claude

31.51%
按下载量换算117

Cursor

19.07%
按下载量换算71

Gemini CLI

9.1%
按下载量换算34

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

external-service

该 Skill 可能调用第三方服务、云服务或外部模型 API,使用前需要确认账号、额度、数据发送范围和服务条款。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills