sentinel-approve SKILL.md skillA

sentinel-approve from snowflake-labs/cocoplus is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add snowflake-labs/cocoplus/sentinel-approve@v1.0.0

Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
snowflake-labs/cocoplus
Path
.cortex/skills/cocosentinel/sentinel-approve/SKILL.md
Versions recorded
1
Latest version
v1.0.0, committed Sep 30, 2026
Size
3,446 bytes
Repository stars
728
License
MIT

CocoSentinel approval — records SHA-bound approval for a previously evaluated artifact. Invoked via $sentinel --approve [file]. Voids automatically if the artifact is modified after approval.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

## Objective

You are recording a SHA-bound approval for an artifact that has been evaluated by CocoSentinel. Your task is to write a formal approval record to `.cocoplus/sentinel/approvals.jsonl`.

Before proceeding, verify that `.cocoplus/` exists in the current directory. If it does not, output: "CocoPlus is not initialized in this directory. Run `$pod init` to set up the CocoPlus project bundle and try again." Then stop.

## Step 1 — Identify Artifact

The developer invoked `$sentinel --approve [file]`. If no file was provided, ask: "Which file are you approving? Provide the file path."

Read the artifact file. If it does not exist, output: "File not found: <path>." Then stop.

## Step 2 — Load Evaluation Result

Compute SHA-256 of the artifact content. Look up `.cocoplus/sentinel/<sha>.json`.

If no evaluation result exists for this SHA, output: "No CocoSentinel evaluation found for this artifact at its current state. Run `$sentinel <file>` first." Then stop.

Read the evaluation result. Check the `outcome` field.

## Step 3 — Determine Approval Path

**If outcome is APPROVED:**
- No rationale required. Proceed to Step 4.

**If outcome is CONDITIONAL:**
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add snowflake-labs/cocoplus/sentinel-approve@sha256:b21f6c025e9ea606

The line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_x5v5u4bw3d2mwxnz.svg)](https://markdownregistry.com/a/art_x5v5u4bw3d2mwxnz)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Sep 30, 2026.

versioncommittedcommitsizeaudit
v1.0.0 latest2026-09-30 1673269 3,446 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3446 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

snowflake-labs/cocoplus · 728 stars · license MIT · pushed 2026-11-07 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_x5v5u4bw3d2mwxnz
GET https://markdownregistry.com/api/v1/resolve?ref=snowflake-labs/cocoplus/sentinel-approve
GET https://markdownregistry.com/api/v1/blob/b21f6c025e9ea606cb8cc64a7146807a5c22ee74b0af417fa51f4f885b6e2375

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from snowflake-labs/cocoplus

adversary SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/adversary/SKILL.md · Show CocoAdversary reviewer configuration and latest challenge results.
v2.0.1 · audit A · 728 stars
adversary-audit SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/adversary/adversary-audit/SKILL.md · Audit CocoAdversary configuration and reviewer separation.
v2.0.1 · audit A · 728 stars
adversary-disable SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/adversary/adversary-disable/SKILL.md · Disable CocoAdversary challenge review mode.
v2.0.1 · audit A · 728 stars
adversary-enable SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/adversary/adversary-enable/SKILL.md · Enable CocoAdversary challenge review mode.
v2.0.1 · audit A · 728 stars
adversary-gap SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/adversary/adversary-gap/SKILL.md · Record or show known CocoAdversary coverage gaps.
v2.0.1 · audit A · 728 stars
adversary-run SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/adversary/adversary-run/SKILL.md · Run CocoAdversary challenge review against a target.
v2.0.1 · audit A · 728 stars
adversary-show SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/adversary/adversary-show/SKILL.md · Show CocoAdversary findings.
v2.0.1 · audit A · 728 stars
cocoplus-console SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/assist-mode/cocoplus-console/SKILL.md · Launch CocoConsole, the CocoPlus 2.0 read-only local browser control plane. Use `$cocoplus console`, `$cocoplus console…
v2.0.0 · audit A · 728 stars
cocoplus-off SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/assist-mode/cocoplus-off/SKILL.md · Deactivate Full Assist Mode — removes all CocoPlus feature flags. Data files (memory, meter history, grove patterns)…
v1.0.0 · audit A · 728 stars
cocoplus-on SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/assist-mode/cocoplus-on/SKILL.md · Activate Full Assist Mode — enables all CocoPlus features simultaneously: Memory Engine, Environment Inspector, Safety…
v1.0.0 · audit A · 728 stars
cocoaudit SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/cocoaudit/SKILL.md · View and export the append-only session audit trail for regulated environments
v1.1.0 · audit A · 728 stars
audit-add SKILL.md skill
snowflake-labs/cocoplus · .cortex/skills/cocoaudit/audit-add/SKILL.md · Add a clearly marked manual CocoAudit event. Usage: $audit add "<message>".
v1.0.0 · audit A · 728 stars

Every file in snowflake-labs/cocoplus

Browse by kind, by grade A, or by owner.