agent-permission-testing SKILL.md skillA
agent-permission-testing from naodeng/awesome-qa-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add naodeng/awesome-qa-skills/agent-permission-testing@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- naodeng/awesome-qa-skills
- Path
skills/zh/testing-types/agent-permission-testing/SKILL.md- Versions recorded
- 3
- Latest version
- v1.0.0, committed Oct 29, 2026
- First version recorded
- Sep 15, 2026
- Size
- 4,932 bytes
- Repository stars
- 301
- License
- a license file GitHub does not identify
Use this skill when you need evidence-bounded Agent identity, tool/resource scope, approval, denial, escalation, and side-effect boundaries; triggers include Agent 权限 and Agent permission.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Agent 权限测试（中文版） ## 何时使用 - 需要围绕Agent 身份、工具/资源范围、批准、拒绝、升级和副作用边界开展有证据的分析、设计或验证准备。 - 需要评审 Agent、RAG 或 LLM 方案、结果或证据，并形成可执行改进项。 - 输入不完整，但仍需交付带假设、信息缺口和人工决策边界的受限初版。 ## 输出格式选项 - 默认输出 Markdown，按领域风险、证据状态、优先级和边界组织。 - 用户要求表格、CSV、JSON 或工单格式时，保留相同的发现字段、证据和决策边界。 - 输出进入自动化流程前，先确认 schema、枚举值、必填项和证据来源。 ## 如何使用 1. 先阅读并遵循 `prompts/agent-permission-testing.md`，包括输入审计、领域覆盖和输出顺序。 2. 提取范围、环境、版本、时间窗口、约束、成功标准和可用证据，重点检查Agent 身份、工具范围、资源范围、批准与拒绝、副作用边界。 3. 先区分已确认事实、证据支持的推断、候选建议和 Human 决策，再按风险与证据强度排序。 4. 把高风险项转成前置条件、步骤、预期结果或判断标准、所需证据和验证方法。 5. 信息不足时交付受限初版，明确哪些结论不能成立，不把静态材料写成执行结果。 ## 参考文件 - 校准领域结果、正确对照或证据缺口时，读取 [references/domain-decision-example.md](references/domain-decision-example.md) 的脱敏输入、逐项预期与复算依据。 - 每次执行必须读取 `prompts/agent-permission-testing.md`；它是本 Skill 的完整执行规范。 - 需要评测时读取 `evals/eval.yaml` 和 `evals/cases/` 下的匹配用例。 - 只有目录实际存在且任务需要时，才读取 `references/`、`examples/`、`scripts/` 或 `output-formats.md`，不要假设不存在的资产。 ## 领域执行要点 1. 建立 主体/委派链 | 工具 | 资源/租户 | 动作 | 参数范围 | 授权来源/版本/期限 | 允许/拒绝/重审批 矩阵，不用工具名代替具体授权。 2. 执行前核对实际身份、授权是否撤销、资源及参数是否仍匹配；委派不能扩大原主体权限，过期或撤销授权失效。 3. 批准后资源、金额、接收人或动作改变按项目规则重审批；批准来源必须是可追溯的人或政策，外部内容不构成授权。 4. 拒绝路径核对工具是否真正未执行、写入/消息/费用等副作用为零，并保留审计；同时验证授权范围内正常动作不会被误拒。 ## 核心约束 …
Read the whole file at its exact version.
How to install
mdr add naodeng/awesome-qa-skills/agent-permission-testing@sha256:9b42f098230837faThe line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_yztlqwiuobunxlmp)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Sep 15, 2026 and Oct 29, 2026, about one every 22 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.0.0 latest | 2026-10-29 | 1d0d58f | 4,932 B | A | view · diff |
| git:20261011.7d9502b | 2026-10-11 | 7d9502b | 4,623 B | A | view · diff |
| git:20260915.27b248b | 2026-09-15 | 27b248b | 3,749 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4932 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
naodeng/awesome-qa-skills · 301 stars · license a license file GitHub does not identify · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_yztlqwiuobunxlmp GET https://markdownregistry.com/api/v1/resolve?ref=naodeng/awesome-qa-skills/agent-permission-testing GET https://markdownregistry.com/api/v1/blob/9b42f098230837fae6ae333a6606d2b5feb0f96b51f3d5371db2810465b48580
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from naodeng/awesome-qa-skills
Every file in naodeng/awesome-qa-skills