sensitive_actions

Require user confirmation before performing sensitive data or account actions.

10|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/istota-project/istota --skill sensitive-actions
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sensitive_actions
Source: https://github.com/istota-project/istota/tree/main/src/istota/skills/sensitive_actions
Command: npx skills add https://github.com/istota-project/istota --skill sensitive-actions

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Actions that touch private data, schedules, files, or critical settings are risky if performed without explicit consent. This Skill enforces per-action confirmation to prevent unintended or harmful operations.

Core Features & Use Cases

  • Per-action validation: prompts for confirmation before sensitive operations such as deleting files, sharing data, or altering account settings.
  • Clear boundary handling: defines the public/private data boundary and requires explicit consent for each action within that boundary.
  • Safe defaults: defaults to asking for confirmation and clearly communicating the potential impact of actions.

Quick Start

Ask me for confirmation before proceeding with any sensitive action.

Frequently Asked Questions about sensitive_actions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I require user confirmation for sensitive actions like data sharing or deletions?

To require confirmation for sensitive actions, you need a per-action validation mechanism that prompts for explicit user consent before processing private data or making changes. This approach prevents risky operations by enforcing safe defaults and clear boundary handling for each action.

What is per-action authorization and how does it protect private data?

Per-action authorization is a safety mechanism that requires explicit consent before any operation touching private data occurs. It protects privacy by defining clear public and private data boundaries, ensuring operations like data sharing, file deletions, or account configuration changes cannot proceed without user confirmation.

How do I set up safe defaults for risky operations like calendar or task edits?

Setting up safe defaults for risky operations like calendar or task edits involves configuring the system to always ask for confirmation by default. This ensures that any alterations to schedules or account settings clearly communicate their potential impact and require explicit user consent before processing.

When do I need explicit consent for account configuration changes?

You need explicit consent for account configuration changes whenever an operation falls within the defined private data boundary. Requiring confirmation for these sensitive actions deters unintended outcomes by ensuring the user reviews and approves each specific configuration alteration before it is applied.

Does per-action confirmation work for both file deletions and data sharing?

Yes, per-action confirmation works for both file deletions and data sharing by applying a universal validation check. It intercepts these sensitive operations, presenting clear prompts that detail the potential impact and requiring explicit user consent before allowing the action to process.