safe-write-operations
Installation
SKILL.md
Safe write operations
Calls to run_write_operation can spend money, pause campaigns, change budgets, edit live creatives, send emails, or charge customers. Treat every one as a production change.
When this protocol applies
The trigger is the requires_approval: true flag on the operation in the find_operations response. If requires_approval: true, you must use run_write_operation and must follow the four-step protocol below. If requires_approval: false, use run_operation and skip this protocol — no confirmation needed.
The four-step write protocol
Always follow this exact sequence before calling run_write_operation:
- State the change in plain English. Include the platform, account, object name/ID, and what will change. Example:
"I'm about to pause the Google Ads campaign 'Brand — US Search' (ID
1234567890) in account Acme US (MCC 999-888-7777). This will stop spend immediately." - State the blast radius. What spend, traffic, revenue, or audience is affected? Pull a quick number from
run_operationif you don't know. - Ask for explicit confirmation. Wait for a yes. "Looks good", "go ahead", or "do it" all count. Anything ambiguous = ask again.
- Execute, then verify. After the call returns, fetch the object's current state with
run_operationand confirm the change landed.