跳到正文
cccskills
免费在 GitHub 公开

control-pane-ops

Handle operational requests from Slack threads across a database, Stripe, Linear, and GitHub. The skill guides lookups, issue creation, and PR reviews while defining platform access limits and human approval requirements for consequential changes.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

Cross-platform operations runbook for the Slack control-pane agent. Scopes each connected platform (database, Stripe, Linear, GitHub via {{target_repo}}), sets the read/write boundary per platform, and defines the human-approval gate for anything irreversible.

集成工具SlackStripeGitHub
查看安装方法

适用场景

  • Checking customer accounts and billing status from Slack
  • Creating Linear issues for reported problems
  • Reviewing a PR and opening a proposed fix
  • Checking whether connected services still authenticate

包含的文件(1)

  • SKILL.md6.1 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

<skill name="control-pane-ops"> <overview> One agent, reachable by @-mentioning it in any Slack thread, runs cross-platform operations tasks — onboarding, billing lookups and changes, PR review, ticket filing, one-off sandbox jobs — with scoped access to every platform the project has connected. Each mention spawns a fresh session: no state carries over between threads and no ledger is kept. Access is read-mostly by default; anything that spends money, changes production data, or changes account or access state stops at a human approval gate in the thread it was requested from. </overview> <when-to-load> - A human @-mentions the agent in a Slack thread with a task. - The `{{cadence}}` heartbeat fires to check connected-platform health. </when-to-load> <workflow>

Step 0 — Read the thread

Read the full Slack thread that triggered the session — the request itself and any earlier messages in the same thread. This is the only context available; there is no memory of other threads or previous runs.

Step 1 — Scope the task to its platforms

Work out which connected platforms the request touches before doing anything:

PlatformAccessTypical readTypical write
DatabaseRead-only via scoped DATABASE_URLAccount/plan lookups, counts, joinsNot possible with this credential — the role cannot run UPDATE/DELETE/ALTER or any schema-changing statement. Surface the exact change needed and hand it to a human to run directly, or route it through an approval-gated connector/tool that supports it
StripeComposio connector (brokered)Plan, invoices, subscription statusRefund, plan change, cancellation — approval gate
LinearComposio connector (brokered)Search issues/projectsInvite a member, create a project or issue — safe to do directly
GitHubgh CLI + GH_TOKEN against {{target_repo}}View/diff a PR, read issues and checksReview, comment, and open a PR freely — never merge
SandboxBuilt-in to the session—Spin up an ad hoc sandbox to reproduce a bug or run a one-off script — always disposable, always safe

Step 2 — Investigate before acting

For anything that isn't a pure lookup, gather the facts first: read the relevant database rows, the customer's Stripe state, the existing Linear issues, and the GitHub PR/diff/checks. Don't propose a change until you can describe exactly what it does and what it touches.

Step 3 — Do the safe work directly

  • Database: run the read-only query and answer in the thread. DATABASE_URL is a read-only role — it cannot execute a write no matter what a human approves. If the task needs a database change, state the exact statement in the thread and hand it to a human to run directly; do not attempt it yourself and do not promise to apply it later.
  • Stripe: look up customer, plan, invoice, and subscription state via the connector. Prepare the exact change (e.g. "cancel subscription sub_123 at period end") but do not execute it — that's a gate.
  • Linear: invite members, create projects, and file tracking issues directly; these are workspace-membership actions, not money or production data.
  • GitHub: gh pr view, gh pr diff, gh pr checks, gh issue view to review. When a fix is warranted: branch, commit, and gh pr create --repo {{target_repo}}. Opening a PR is fine — merging is not.
  • Sandbox: spin one up to reproduce a reported bug or run a one-off job, and tear it down when done.

Step 4 — Hold the irreversible step for approval

Post the exact action you're about to take — the platform, the specific change, and its effect — and wait for an explicit reply in the thread before acting. In a channel, ask the approver to @mention the bot, or the reply never reaches you. Never proceed on silence, and never re-attempt a gated action the requester didn't confirm. This applies to Stripe changes, GitHub merges, and account/access changes, all of which this session can execute once approved. Database writes are different in kind, not just gated: DATABASE_URL is a read-only role, so there is nothing to execute even after approval — hand the statement to a human instead (see Step 3).

Step 5 — Reply in the thread

State the result plainly: what you found, what you did, links to any Linear issue or GitHub PR created, and what's left pending approval. This thread is the only output channel for the task.

Step 6 — Heartbeat ({{cadence}})

This run is not a task — no Slack thread triggered it. Do one lightweight read against each connected platform (a Stripe account lookup, a Linear viewer query, gh auth status against {{target_repo}}, a trivial SELECT 1 against the database) to confirm the scoped credential still authenticates. Post a health-check alert to {{ops_channel}} naming anything that failed, so a human can reconnect it before the next task arrives. Do nothing else on this run.

</workflow> <guardrails> - **Isolation.** Every mention runs in its own fresh session and its own isolated sandbox. A session reaches only the platforms it's scoped to. - **Scoped, brokered secrets.** Stripe and Linear are connectors brokered server-side; `GH_TOKEN` and `DATABASE_URL` are injected at runtime. No raw credential is ever pasted into chat. - **Human approval gates.** Money movement, production-data writes, merges, and account/access changes always stop for a person in the thread. No exceptions, no batching around the gate. - **Read-mostly by default.** If a request is ambiguous about whether it needs a write, default to investigating and proposing, not executing. - **The heartbeat only checks health.** It never processes a task, drafts a reply, or takes a platform action beyond the read-only probe. - **Never merge.** GitHub PRs are opened and reviewed by this agent; a human owns every merge. </guardrails> </skill>

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Review Slack access requests against Okta role and team information, then prepare narrowly scoped GitHub or AWS IAM permissions. Apply changes only after an eligible person's approval and record the grant, reasoning, approver, and timestamp.

中文简介正在准备中。当前显示英语简介。

  • Reviewing GitHub repository access requests from Slack
  • Preparing AWS IAM permissions for a specific task
  • Routing sensitive access requests for additional review
kortix-ai/suna2万2026年10月18日 更新

Research companies and people before outreach or meetings. Combines business profiles, recent news, hiring signals, and key contacts into a sourced brief with talking points and suggested questions, adding relationship history when CRM data is connected.

中文简介正在准备中。当前显示英语简介。

  • Research a prospective customer before outreach
  • Prepare background information for meeting attendees
  • Compare a competitor's products and positioning
kortix-ai/suna2万2026年10月18日 更新

Review daily Google Ads and Meta Ads results for budget pacing, declining performance, and unusual activity. Get prioritized findings with supporting numbers and concrete recommendations for a marketing team to assess and carry out.

中文简介正在准备中。当前显示英语简介。

  • Checking whether campaign budgets are being spent on schedule
  • Investigating rising acquisition costs or falling ad returns
  • Finding ads and keywords that spend without converting
kortix-ai/suna2万2026年10月18日 更新

Automate website tasks such as navigating pages, filling forms, clicking buttons, taking screenshots, and extracting data. The skill also supports web app testing, with specialized guides for Electron desktop apps, Slack, and cloud browsers.

中文简介正在准备中。当前显示英语简介。

  • Automate form entry and page navigation
  • Capture screenshots and extract page data
  • Explore web apps for bugs
kortix-ai/suna2万2026年10月18日 更新

Process emailed vendor invoices by extracting details, comparing them with purchase orders and invoice history, and recording duplicates, overcharges, or missing orders. Summarize results in Slack for human review; payment approval and execution remain with people.

中文简介正在准备中。当前显示英语简介。

  • Checking incoming invoices against purchase orders
  • Finding duplicate invoices and likely resends
  • Reviewing unit prices and remaining order balances
kortix-ai/suna2万2026年10月18日 更新

billing

免费

Guide changes to Kortix billing code, admin controls, and pricing screens. Explain how plans, trials, enterprise contracts, and access exceptions should work, where pricing is defined, and which audited routes must handle account changes.

中文简介正在准备中。当前显示英语简介。

  • Update billing logic and its specification together
  • Review how trials and enterprise contracts are handled
  • Find the code that defines prices and allowances
kortix-ai/suna2万2026年10月18日 更新

查看 kortix-ai 的全部技能

报告此技能的问题