360 Secure SkillHub
360 安全技能中心

Action Gate Bridge

读取动作桥接与审批矩阵参考文档,为通信工作流中的邮件发送、预约、设置变更、公开发布和支出等外部动作创建类型化提案,或通过侧车路由写请求,并依据返回结果判断动作被允许、需审批或被阻止,默认不执行风险动作。

heyalerio
heyalerio
热度 33.68
最近更新 2026-05-11 17:40:40
分类:安全依赖:代码执行 / 读写文件 / 第三方 API应用场景:工作流 / 自动化脚本 / API 集成

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add action-gate-bridge-clean
Metadata
name
action-gate-bridge
description
Route risky communications next steps through a typed action-intent bridge so external writes, bookings, settings changes, public posts, and spend decisions require explicit policy and approval handling instead of informal reasoning.

Action Gate Bridge

Use this skill when a communications workflow moves from analysis into a possible external action.

Core workflow

  1. Read references/action-bridge.md first.
  2. Read references/approval-matrix.md before proposing any action.
  3. Pick the narrowest typed action that fits the next step.
  4. Create a proposal or route the write intent through the sidecar.
  5. Interpret the result as allowed, needs_approval, blocked, or accepted.
  6. Decide what to show the user; do not silently execute a risky action.

Helpers

Use the bundled scripts when the host environment supports them:

node scripts/propose-action.js communications send_email target@example.com "Subject" "Summary" "Program"
node scripts/route-http-write.js communications api-target "Summary" /path '{"hello":"world"}' "Program" "credentials-ref"

Safety

  • Red actions require explicit user approval.
  • Do not send, post, submit, confirm, or spend by default.
  • If policy, scope, approval, or reversibility is unclear, escalate instead of acting.