Human Auth Sms 2fa

What it does

Example prompts

• “/human-auth-sms-2fa”

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

1. 1Read the code: read() to get the actual code value.
2. 2Check the current screen. The verification input may still be visible, or the app may have moved to a different screen during the wait.
3. 3If the input field is still visible: tap it to focus, then type_text().
4. 4If the app moved away: press keyevent KEYCODE_BACK to return to the verification screen, or re-navigate to it.
5. 5Tap Verify / Submit / Continue.
6. 6Check if verification succeeded. If the app shows an error (code expired), you may need to request a new code and call request_human_auth…

What it can do on your machine

Read from SKILL.md and the folder at commit d4dae3d. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  No scripts in the folder and no shell commands in SKILL.md.

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Human Auth Sms 2fa loads about 507 tokens when it runs. Until then it costs about 40 tokens; SKILL.md has 216 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~40

When it runs · the whole SKILL.md, loaded when a task matches

~507

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from pockebot/openpocket at commit d4dae3d, republished under its MIT licence (© pockebot). 216 words, ~507 tokens.

name

human-auth-sms-2fa

description

Handle SMS verification codes and 2FA TOTP codes from Human Phone. Covers OTP entry, code verification, and multi-factor authentication flows.

request_human_auth(
  capability: "sms",
  instruction: "Please enter the verification code sent to your phone for [app/service].",
  uiTemplate: {
    allowTextAttachment: true,
    requireArtifactOnApprove: true,
    title: "Verification Code Needed",
    summary: "Enter the SMS or authenticator code."
  }
)

© pockebot, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in skills/human-auth-sms-2fa of pockebot/openpocket.

Open the folder on GitHubat commit d4dae3d