Agent skill

Confirm Action

by dandye in dandye/ai-runbooks

Ask the user to confirm before taking a significant action. An agent skill from dandye/ai-runbooks.

Apache-2.0Auto-check passedDevOps & Cloud

Install Confirm Action

skills CLI
$ npx skills add dandye/ai-runbooks --skill confirm-action -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install dandye/ai-runbooks confirm-action --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/dandye/ai-runbooks.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/confirm-action .claude/skills/confirm-action && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
confirm-action
GitHub stars
127
Token cost
~523 tokens
SKILL.md length
155 words
Files
1
Skills in repo
27
Repo updated
First seen
Licence
Apache-2.0

At a glance

Ask the user to confirm before taking a significant action. An agent skill from dandye/ai-runbooks.

  • Works in 3 steps: Present Question → Wait for Response → Return Response
  • DevOps & Cloud work in your project
  • SKILL.md covers Inputs, Workflow, Outputs and When to Use, plus 1 more section
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Confirm Action is an agent skill from dandye/ai-runbooks. Ask the user to confirm before taking a significant action. Use before containment, remediation, or other impactful operations to ensure analyst approval. Presents options and waits for response.

Its SKILL.md is about 520 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud. The licence is Apache-2.0.

When your agent uses it

  • DevOps & Cloud work in your project

Example prompts

  • “/confirm-action”

Workflow steps

3 steps, taken from the step headings in SKILL.md.

  1. Present Question
  2. Wait for Response
  3. Return Response

What it can do on your machine

Read from SKILL.md and the folder at commit 72a6863. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Confirm Action loads about 523 tokens when it runs. Until then it costs about 53 tokens; SKILL.md has 155 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~53
When it runs · the whole SKILL.md, loaded when a task matches
~523

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from dandye/ai-runbooks at commit 72a6863, republished under its Apache-2.0 licence (© dandye). 155 words, ~523 tokens.

Download SKILL.mdSave it as .claude/skills/confirm-action/SKILL.md (or your agent's skills folder).
name
confirm-action
description
Ask the user to confirm before taking a significant action. Use before containment, remediation, or other impactful operations to ensure analyst approval. Presents options and waits for response.
type
Skill
personas
all
generated.by
human:mlutx
generated.at
2026-01-12T17:23:43-06:00

Confirm Action Skill

Ask the user a confirmation question before proceeding with a significant action.

Inputs

  • QUESTION_TEXT - The specific question to ask (e.g., "Isolate endpoint WORKSTATION-01?", "Proceed with account disable for jsmith?")
  • (Optional) RESPONSE_OPTIONS - Predefined options for the user:
    • Default: ["Yes", "No"]
    • Custom examples: ["Disable Account", "Reset Password", "Monitor Only"]

Workflow

Step 1: Present Question

Display the question to the user with available options.

Step 2: Wait for Response

Collect the user's selection or custom input.

Step 3: Return Response

Provide the response back to the calling workflow for decision branching.

Outputs

OutputDescription
USER_RESPONSEThe user's answer to the confirmation question

When to Use

Always confirm before:

  • Isolating/quarantining endpoints
  • Disabling user accounts
  • Blocking IPs/domains at firewall
  • Terminating processes
  • Deleting files
  • Escalating to incident response
  • Closing cases as false positive (for high-severity alerts)

May skip confirmation for:

  • Adding comments to cases
  • Running enrichment queries
  • Generating reports
  • Read-only operations

Example Confirmations

Containment:

Question: "Isolate endpoint WORKSTATION-01 from the network?"
Options: ["Yes - Isolate", "No - Continue Monitoring", "Escalate First"]

Account Action:

Question: "User jsmith shows signs of compromise. What action?"
Options: ["Disable Account", "Force Password Reset", "Monitor Only", "Escalate to IR"]

Case Closure:

Question: "Close case 1234 as False Positive?"
Options: ["Yes - Close FP", "No - Keep Open", "Escalate to Tier 2"]

© dandye, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in skills/confirm-action of dandye/ai-runbooks.

Open the folder on GitHubat commit 72a6863

Compare with similar skills

Confirm Action next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Confirm Action compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Confirm Action this skilldandye/ai-runbooks127—~523Automated safety check: PassApache-2.0
Iron Proxy Gateway for NanoClawnanocoai/nanoclaw31k—~4.6kAutomated safety check: NotesMIT
GitHub Actions Supply Chain Pinningasyncapi/generator1.1k—~1.9kAutomated safety check: PassApache-2.0
AWS Cloud Advisortech-leads-club/agent-skills7k—~2.1kAutomated safety check: PassCC-BY-4.0
KubeShark for KubernetesLukasNiessen/kubernetes-skill446—~1.2kAutomated safety check: PassMIT
Migrate Dotnet9 To Dotnet10dotnet/skills5.6k2 repos~4.8kAutomated safety check: PassMIT

Similar skills

  • Installs or refreshes Iron Proxy and its Iron Control web console for NanoClaw, with a local Docker setup, database, credentials and a human approval bridge.

    31k GitHub stars~4.6k tokensUpdated today
    DevOps & CloudAuto-check: notes
  • A skill your agent uses when editing, adding, or reviewing any file under .github/workflows/, or when a CI step installs a CLI tool (npm i -g, npx, pipx, uses: /setup-).

    1.1k GitHub stars~1.9k tokensUpdated yesterday
    DevOps & CloudAuto-check passed
  • AWS Cloud Advisor

    tech-leads-club/agent-skills

    Answers AWS architecture, security and service-selection questions by searching AWS documentation through MCP tools first, then adapting advice to your stack and team.

    7k GitHub stars~2.1k tokensUpdated yesterday
    DevOps & CloudAuto-check passed
  • KubeShark for Kubernetes

    LukasNiessen/kubernetes-skill

    Keeps Kubernetes manifests, Helm charts and policies grounded by diagnosing six failure modes, such as insecure defaults and API drift, and loading only matching references.

    446 GitHub stars~1.2k tokensUpdated 27 days ago
    DevOps & CloudAuto-check passed
  • Official

    Migrate a .NET 9 project or solution to .NET 10 and resolve all breaking changes.

    5.6k GitHub starsUsed in 2 repos~4.8k tokens
    DevOps & CloudAuto-check passed
  • Censorship Audit

    hedioum/Hedioum-Pool-Tunnel

    Audit and harden the Hedioum Pool Tunnel against nation-state DPI and censorship, as a filtering/anti-censorship expert would.

    139 GitHub stars~4.9k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check passed

More from dandye/ai-runbooks

All 27 skills in this repo
  • Close Case Artifact

    dandye/ai-runbooks

    Close a case or alert with proper reason and documentation. An agent skill from dandye/ai-runbooks.

    127 GitHub stars~615 tokensUpdated 1 mo ago
    Auto-check passed
  • Correlate Ioc

    dandye/ai-runbooks

    Check for existing SIEM alerts and case management entries related to IOCs.

    127 GitHub stars~624 tokensUpdated 1 mo ago
    Auto-check passed
  • Deep Dive Ioc

    dandye/ai-runbooks

    Perform exhaustive analysis of a critical IOC. An agent skill from dandye/ai-runbooks.

    127 GitHub stars~1.1k tokensUpdated 1 mo ago
    Auto-check passed
  • Enrich Ioc

    dandye/ai-runbooks

    Enrich an IOC (IP, domain, hash, URL) with threat intelligence.

    127 GitHub stars~702 tokensUpdated 1 mo ago
    Auto-check passed
  • Find Relevant Case

    dandye/ai-runbooks

    Search for existing cases related to specific indicators or entities.

    127 GitHub stars~562 tokensUpdated 1 mo ago
    Auto-check passed
  • Full Alert Triage

    dandye/ai-runbooks

    Complete Tier 1 triage workflow. An agent skill from dandye/ai-runbooks.

    127 GitHub stars~1.8k tokensUpdated 1 mo ago
    Auto-check passed

Questions about Confirm Action

What does Confirm Action do?

Ask the user to confirm before taking a significant action. An agent skill from dandye/ai-runbooks. Confirm Action is an agent skill from dandye/ai-runbooks. Ask the user to confirm before taking a significant action.

When should I use Confirm Action?

Confirm Action fits situations like: devOps & Cloud work in your project.

How do I install Confirm Action in Claude Code?

Run `npx skills add dandye/ai-runbooks --skill confirm-action -a claude-code`. Or copy the skill folder (skills/confirm-action in dandye/ai-runbooks) into .claude/skills/confirm-action in your project. Claude Code loads it when a task matches its description.

How do I install Confirm Action in Codex?

Run `npx skills add dandye/ai-runbooks --skill confirm-action -a codex`. Or copy the skill folder (skills/confirm-action in dandye/ai-runbooks) into .agents/skills/confirm-action in your project. Codex loads it when a task matches its description.

Can I use Confirm Action in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add dandye/ai-runbooks --skill confirm-action -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/confirm-action, .gemini/skills/confirm-action, .github/skills/confirm-action and .opencode/skills/confirm-action in your project.

What does Confirm Action need to run?

SKILL.md names no scripts, command-line tools or credentials: Confirm Action is instructions for the agent only.

Does Confirm Action access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Confirm Action safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Confirm Action use?

Confirm Action is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Confirm Action use?

About 523 tokens (SKILL.md is roughly 2.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Confirm Action?

Skills that share tags, products or a category with Confirm Action: Iron Proxy Gateway for NanoClaw (nanocoai/nanoclaw, 31k stars), GitHub Actions Supply Chain Pinning (asyncapi/generator, 1.1k stars), AWS Cloud Advisor (tech-leads-club/agent-skills, 7k stars) and KubeShark for Kubernetes (LukasNiessen/kubernetes-skill, 446 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Confirm Action?

dandye (a GitHub user) maintains it in dandye/ai-runbooks, which has 127 GitHub stars. The repository holds 27 skills in this directory. The repository was last updated on August 14, 2026.

Source: dandye/ai-runbooks on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.