360 Secure SkillHub
360 安全技能中心

Agent Doppelgänger

ADG 是策略约束下的身份代理:先将邮件、Discord、Slack、WhatsApp 等渠道消息规范化,再分析意图(领域、风险、权限、歧义),经声明式策略门与置信度引擎判断能否代答,随后按用户风格、启发式与偏好生成回复,最后由校验器审计硬约束;越权、低置信或禁止领域时自动升级为草稿或阻止。

sieershafilone
sieershafilone
热度 92.55
最近更新 2026-05-18 11:58:31
分类:协作依赖:代码执行 / 第三方 API / 内部调用大模型应用场景:邮件起草 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add agent-doppelganger
Metadata
name
agent-doppelganger
description
Constrained autonomous delegate for identity-proxied communication. Handles incoming messages (Email, Discord, Slack, WhatsApp) by analyzing intent and applying declarative authority policies before generating responses. Use when the user wants to delegate communication tasks while maintaining identity fidelity and enforcing strict non-overreach boundaries.

Agent Doppelgänger (ADG)

ADG is a policy-bounded identity proxy for real-world communication. It acts as a constrained autonomous delegate that communicates on your behalf within formally provable limits.

Core Workflow

  1. Adapter: Normalize incoming messages from various channels.
  2. Intent Analysis: Classify the intent along Domain, Stakes, Authority, and Ambiguity.
  3. Policy Gate: Evaluate declarative policies (DSL) to determine if the agent is allowed to handle the request.
  4. Confidence Engine: Measure confidence in both intent analysis and proposed handling.
  5. Response Generation: Synthesize a response using your Style, Heuristics, and Preferences.
  6. Verifier: Audit the response against hard constraints before sending or drafting.

Implementation Details

1. Identity Modeling

Identity is modeled as a composition of four layers:

  • Style: Surface form characteristics (length, directness, vocabulary).
  • Heuristics: Core decision logic (e.g., "avoid meetings without agenda").
  • Preferences: Soft weights (e.g., Work > Social).
  • Constraints: Hard, user-defined rules.

2. Authority & Policy

Policies are declarative and evaluated before any generation occurs. This ensures safety and prevents prompt injection from bypassing limits.

3. Escalation

ADG automatically escalates to you (Draft or Block) if:

  • Policy is violated.
  • Confidence falls below the defined threshold.
  • The request involves forbidden domains (Finance, Legal, Medical, etc.).

References

Forbidden Modeling

ADG is strictly forbidden from modeling or handling:

  • Secrets
  • Financial authority
  • Legal intent
  • Political opinions
  • Emotional vulnerability/trauma