Token导航 LogoToken导航

Agent Skill · 开发

agent-sop-author(AgentSOP 作者)

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

agent-sop-author 是开发类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为调用外部服务;许可证信息还不明确,第三方扫描已通过,按安装量在开发类的 21,746 个 Skill 里排第 12,765。

总安装 1,139周安装 47GitHub Stars 935下载 372核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
unknown

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:agent-sop-author(AgentSOP 作者)
来源仓库:https://github.com/strands-agents/agent-sop
仓库路径:skills/agent-sop-author
安装命令:
npx skills add https://github.com/strands-agents/agent-sop --skill agent-sop-author
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/strands-agents/agent-sop --skill agent-sop-author

这个 Skill 是做什么的

开发类 Skill 面向写代码、改代码和排查问题,一般会读写仓库文件,部分还会执行构建或测试命令。

用于创建和管理基于 Markdown 的标准操作流程(SOP)。适合构建复杂工作流自动化指南时使用。agent-sop-author 属于开发类 Skill,可作为该场景下的辅助能力补充。通过 GitHub 安装,支持参数化输入和约束执行。使用自然语言描述多步流程,兼容不同 AI 系统。

需配合 RFC 2119 约束语法确保流程严谨性和可操作性。

来源仓库内路径:skills/agent-sop-author

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/strands-agents/agent-sop --skill agent-sop-aut…;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它需要调用外部服务,先在测试目录或测试账号里跑,确认没问题再放到正式项目。

常见问题

6 条

agent-sop-author 怎么安装?

在终端执行 npx skills add https://github.com/strands-agents/agent-sop --skill agent-sop-author。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

agent-sop-author 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

agent-sop-author 需要什么权限?

权限级别是调用外部服务。该 Skill 可能调用第三方服务、云服务或外部模型 API,使用前需要确认账号、额度、数据发送范围和服务条款。

agent-sop-author 是免费的吗?

公开资料没有标注明确许可证,收费和商用限制都无法确认。正式使用前请到来源仓库核对授权说明。

agent-sop-author 用的人多吗?

公开数据是累计安装 1,139 次,近一周安装 47 次,下载 372 次,GitHub 935 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

agent-sop-author 安全吗?

第三方扫描结果为通过,但这只覆盖已知的静态检查项,不能替代自己读一遍源码和安装命令。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。
  • 第三方扫描已通过,常见的高风险行为没有命中。

先想清楚的地方

  • 许可证没有明确标注,能不能商用、能不能再分发都不确定。
  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理开发类任务、又不想每次都手写提示词的人。

不太适合

  • 需要明确授权才能用到公司项目里的场景。
  • 需要厂商级技术支持和 SLA 的生产系统。

开发类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
skill-vetter

技能审查员 · OpenClaw

8,779,018986操作浏览器MIT-0通过
ontology

本体论 · OpenClaw

6,636,960576只读MIT-0通过
entra-app-registration

内部应用程序注册 · Codex、Claude

6,631,872764接触敏感数据未明确通过
entra-app-registration

内部应用程序注册 · Codex、Claude

3,757,680201接触敏感数据未明确通过
nano-banana-pro

纳米香蕉专业版 · OpenClaw

3,526,898364接触敏感数据MIT-0有提醒
agent-sop-author

AgentSOP 作者 · 本页

1,139935调用外部服务未明确通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

Agent SOP Author

Overview

Agent SOPs (Standard Operating Procedures) are markdown-based instruction sets that guide AI agents through sophisticated workflows using natural language, parameterized inputs, and constraint-based execution. This skill teaches you how to create (or update), structure, and validate Agent SOPs that work across different AI systems.

Usage

When working with Agent SOPs and need to:

  • Create new workflow automation SOPs
  • Update existing workflow automation SOPs
  • Structure multi-step agent workflows
  • Apply RFC 2119 constraints (MUST, SHOULD, MAY)
  • Validate SOP format and structure
  • Convert workflows into reusable templates
  • Ensure SOPs work across AI systems (Claude, Kiro, Cursor, etc.)

Core Concepts

What is an Agent SOP?

An Agent SOP is a standardized markdown file (.sop.md) that defines:

  • Clear objectives with detailed overviews
  • Parameterized inputs for flexible reuse
  • Step-by-step instructions with RFC 2119 constraints
  • Examples and troubleshooting for reliable execution
  • Multi-modal distribution (MCP tools, Anthropic Skills, Python modules)

Key Features

RFC 2119 Constraints: Use standardized keywords (MUST, SHOULD, MAY) to provide precise control over agent behavior without rigid scripting.

Parameterization: Accept parameters that customize behavior for different projects, teams, or requirements.

Resumability: Document progress as agents work, making it easy to understand and resume if interrupted.

Creating Agent SOPs

File Location

You MUST check for an agent-sops/ directory in the current working directory:

  • If agent-sops/ exists, You MUST write the SOP file there
  • If agent-sops/ does not exist, You MAY write the SOP in the current directory or ask the user where to save it

File Naming

You MUST follow these naming conventions:

  • Use .sop.md file extension
  • Use kebab-case for filenames (e.g., code-assist.sop.md, idea-honing.sop.md)
  • Choose descriptive names that indicate the SOP's purpose

Validation

You MUST run validate-sop.sh after EVERY change:

The validation script is located in the same directory as this SKILL.md file. When you read this skill, you will know the full path to SKILL.md, and the validation script is in that same directory.

<skill-directory>/validate-sop.sh path/to/your-sop.sop.md

You MUST fix all errors (❌) before proceeding. You SHOULD address warnings (⚠️) when possible.

Required Structure

Every Agent SOP MUST include these sections in order:

# [SOP Name]

## Overview
[Concise description of what the SOP does and when to use it]

## Parameters

- **required_param** (required): Description
- **optional_param** (optional, default: "value"): Description

**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined

## Steps
### 1. [Step Name]
Description of what happens in this step.

**Constraints:**
- You MUST [specific requirement]
- You SHOULD [recommended behavior]
- You MAY [optional behavior]

## Examples
[Concrete usage examples]

## Troubleshooting
[Common issues and solutions]

Parameters Section

You MUST define parameters using this format:

## Parameters

- **parameter_name** (required): Description of required input
- **another_param** (required): Description
- **optional_param** (optional): Description of optional input
- **with_default** (optional, default: "default_value"): Description

**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined

Parameter naming rules:

  • You MUST use lowercase letters
  • You MUST use underscores for spaces (snake_case)
  • You MUST be descriptive of purpose
  • You MUST list required parameters before optional ones

The Constraints for parameter acquisition section:

  • You MUST include this section in every Parameters section
  • You MUST include these directives:

- "If all required parameters are already provided, You MUST proceed to the Steps" - "If any required parameters are missing, You MUST ask for them before proceeding" - "When asking for parameters, You MUST request all parameters in a single prompt" - "When asking for parameters, You MUST use the exact parameter names as defined"

  • You MAY add additional constraints for flexible input methods:
**Constraints for parameter acquisition:**
- If all required parameters are already provided, You MUST proceed to the Steps
- If any required parameters are missing, You MUST ask for them before proceeding
- When asking for parameters, You MUST request all parameters in a single prompt
- When asking for parameters, You MUST use the exact parameter names as defined
- You MUST support multiple input methods including:
  - Direct input: Text provided directly
  - File path: Path to a local file
  - URL: Link to an internal resource
- You MUST use appropriate tools to access content
- You MUST confirm successful acquisition before proceeding
- You SHOULD save acquired data to a consistent location

Steps Section

You MUST structure steps with:

  1. Numbered heading (### 1., ### 2., etc.)
  2. Step name
  3. Natural language description
  4. Constraints: section with RFC 2119 keywords

Example:

### 1. Setup
Initialize the project environment and create necessary structures.

**Constraints:**
- You MUST validate directory structure exists
- You MUST create missing directories
- You MUST NOT proceed if directory creation fails
- You SHOULD log all setup actions
- You MAY skip validation if --force flag is provided

For conditional logic:

### 3. Conditional Processing
If validation passes, proceed with processing. Otherwise, report errors.

**Constraints:**
- You MUST check validation status before proceeding
- If validation passes, You MUST process the data
- If validation fails, You MUST report specific errors
- You MUST NOT continue with invalid data

RFC 2119 Keywords

You MUST use these keywords as defined in RFC 2119:

  • MUST / REQUIRED: Absolute requirement
  • MUST NOT / SHALL NOT: Absolute prohibition
  • SHOULD / RECOMMENDED: Strong recommendation (may have valid reasons to ignore)
  • SHOULD NOT / NOT RECOMMENDED: Strong discouragement (may have valid reasons to accept)
  • MAY / OPTIONAL: Truly optional item

Negative Constraints

You MUST provide context when using negative constraints:

Good (with context):

- You MUST NOT use ellipses (...) because your output will be read aloud by text-to-speech
- You SHOULD NEVER delete Git history files since this could corrupt the repository
- You MUST NOT run `git push` because this could publish unreviewed code

Bad (without context):

- You MUST NOT use ellipses
- You SHOULD NEVER delete Git files
- You MUST NOT run git push

Common contexts for negative constraints:

  • Technical limitations: "because the system cannot handle..."
  • Security risks: "since this could expose sensitive data..."
  • Data integrity: "as this could corrupt important information..."
  • User experience: "because users will be confused by..."
  • Compatibility: "since this breaks integration with..."
  • Performance: "as this could cause significant slowdowns..."

Examples Section

You SHOULD include concrete examples showing:

  • Example input parameters
  • Expected output or behavior
  • Common usage patterns
## Examples

### Example 1: Basic Usage
**Input:**
- task_description: "Create user authentication system"
- mode: "interactive"

**Expected Behavior:**
Agent will guide through TDD workflow, creating tests first, then implementation.

### Example 2: Automated Mode
**Input:**
- task_description: "Fix bug in payment processing"
- mode: "auto"

**Expected Behavior:**
Agent will automatically implement fix following established patterns.

Troubleshooting Section

You SHOULD include common issues and solutions:

## Troubleshooting

### Parameter Validation Fails
If parameter validation fails, check that:
- All required parameters are provided
- Parameter names use snake_case
- Values match expected types

### Step Execution Hangs
If a step appears to hang:
- Check for missing tool permissions
- Verify file paths are accessible
- Review constraint requirements

Interactive SOPs

For SOPs requiring user interaction:

  1. You SHOULD clearly indicate when user interaction is expected
  2. You MUST specify how to handle user responses
  3. You SHOULD specify where to save interaction records

Example:

### 2. Requirements Clarification
Guide the user through questions to refine their initial idea.

**Constraints:**
- You MUST ask one question at a time
- You MUST append each Q&A to "idea-honing.md"
- You SHOULD adapt follow-up questions based on previous answers
- You MUST continue until sufficient detail is gathered

Best Practices

You SHOULD follow these practices when authoring SOPs:

  1. Keep steps focused: Each step should accomplish one clear objective
  2. Use clear constraints: Be specific about requirements vs recommendations
  3. Provide examples: Show concrete usage for complex workflows
  4. Natural language: Write descriptions that are easy to understand
  5. Minimize complexity: Avoid deeply nested conditional logic
  6. Specify artifacts: Include file paths for all created artifacts
  7. Test thoroughly: Validate SOPs work across different AI systems
  8. Document edge cases: Include troubleshooting for common issues

Quick Reference

ElementFormatRequired
File extension.sop.mdYes
Title# SOP NameYes
Overview## OverviewYes
Parameters## ParametersYes
Steps## Steps with ### N.Yes
Constraints**Constraints:** with RFC 2119Yes
Examples## ExamplesRecommended
Troubleshooting## TroubleshootingRecommended

Common Patterns

Before: Unstructured Prompt

Please implement a user authentication system using TDD.
Make sure to write tests first and follow best practices.

After: Structured SOP

# Code Assist

## Overview
This SOP guides implementation using test-driven development.

## Parameters
- **task_description** (required): Description of task
- **mode** (optional, default: "interactive"): "interactive" or "auto"

## Steps
### 1. Setup
Initialize project environment.

**Constraints:**
- You MUST validate directory structure
- You MUST create test directory if missing
- You MUST NOT proceed if setup fails

### 2. Test Creation
Create tests based on requirements.

**Constraints:**
- You MUST write tests before implementation
- You SHOULD follow existing test patterns
- You MAY add additional edge case tests

Common Mistakes

Missing Context in Negative Constraints

Problem: Using MUST NOT without explaining why. Fix: Always provide context: "You MUST NOT X because Y"

Vague Parameter Descriptions

Problem: "input_data (required): The data" Fix: "input_data (required): JSON object containing user profile fields (name, email, role)"

Mixing Requirement Levels

Problem: Using MUST for optional behaviors or MAY for critical requirements. Fix: Use RFC 2119 keywords precisely - MUST for absolute requirements, SHOULD for recommendations, MAY for optional.

Missing Examples

Problem: Complex workflow without concrete usage examples. Fix: Include at least one complete example showing input parameters and expected behavior.

Overly Complex Steps

Problem: Single step trying to accomplish multiple objectives with nested conditionals. Fix: Break into multiple focused steps, each with clear constraints.

Visual Workflow

flowchart TD
    Start[Create SOP] --> Name[Choose descriptive name]
    Name --> Structure[Add required sections]
    Structure --> Overview[Write overview]
    Overview --> Params[Define parameters]
    Params --> Steps[Create steps with constraints]
    Steps --> Examples[Add examples]
    Examples --> Troubleshoot[Add troubleshooting]
    Troubleshoot --> Validate[Validate format]
    Validate --> Test[Test with AI agent]
    Test --> Done[Distribute SOP]

    style Start fill:#90EE90
    style Done fill:#90EE90
    style Validate fill:#FFB6C1

The Bottom Line

Agent SOPs transform complex workflows into reusable, shareable instructions that work across different AI systems. They use standardized markdown format with RFC 2119 constraints to provide precise control while preserving agent reasoning ability.

When creating SOPs, focus on clear structure, specific constraints with context, and concrete examples. Test thoroughly across different AI systems to ensure reliability.

平台分布

Codex

35.42%
按下载量换算132

Claude

31.51%
按下载量换算117

Cursor

19.07%
按下载量换算71

Gemini CLI

9.1%
按下载量换算34

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

调用外部服务

该 Skill 可能调用第三方服务、云服务或外部模型 API,使用前需要确认账号、额度、数据发送范围和服务条款。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。目前只有一个公开来源,建议同时核对源仓库。

继续浏览同类 Skills