allow is a skill in muaaz9329/cheap-ag, last changed 2 Nov 2026. It can run shell commands, pre-approve tools and run commands as it loads — read the findings before installing.
Opt this repository in to sending code to Cheap Agent's worker models - all models, --zdr-only (zero-retention only), or --models provider/model,...
At a glance
What it can touch
How much a skill can do, not whether it is risky.
Pattern check:2 items to reviewSee them
Install
Each tab says whether it installs commit 7b1ee74, the one we checked, or the latest version.
OpenCode also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
Goose also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
Windsurf (Devin Desktop) also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
Zed also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
Roo Code also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
Factory Droid also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
Junie also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
Amp also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.
No install command here reaches Kiro. Copy the skill's folder into .kiro/skills/ in your project, or ~/.kiro/skills/ for all your projects. muaaz9329/cheap-ag/plugin/skills/allow (opens in a new tab)
Antigravity also looks in .agents/skills/, so the Any agent steps reach it with This project. For All projects, see where Antigravity looks.
Cline also looks in .claude/skills/, so the Claude Code steps reach it with This project. For All projects, see where Cline looks.
Read these 2 items before installing, starting with Broad tools pre-approved in allowed-tools — SKILL.md:6
Claude Code
Pinned to commit 7b1ee74, the one we checked.
From your project's root folder:
tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/muaaz9329/cheap-ag.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&git -C "$tmp" sparse-checkout set -- plugin/skills/allow &&git -C "$tmp" checkout -q 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&mkdir -p .claude/skills &&mkdir .claude/skills/allow &&cp -R "$tmp"/plugin/skills/allow/. .claude/skills/allow/ &&rm -rf "$tmp"If Claude Code was already running and this created the skills folder, run /reload-skills.
Or install the cheapag plugin it ships in. Installs the latest version, not the one we checked. Installs everything in the plugin, including any hooks, MCP servers and scripts our check doesn't cover.
claude plugin marketplace add muaaz9329/cheap-ag --scope project &&claude plugin install cheapag@cheap-agent --scope projectClaude apps
Pinned to commit 7b1ee74, the one we checked.
Skills in the Claude apps belong to your account rather than to a project.
Make allow.zip, with the skill folder at the top level:
tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/muaaz9329/cheap-ag.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&git -C "$tmp" sparse-checkout set -- plugin/skills/allow &&git -C "$tmp" checkout -q 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&out="$(mktemp -d)" &&cp -R "$tmp"/plugin/skills/allow "$out"/allow &&(cd "$out" && zip -qr - allow) > allow.zip &&rm -rf "$tmp" "$out"In Claude, open Customize > Skills, select +, then + Create skill > Upload a skill, and choose allow.zip.
On Free, Pro and Max plans, turn on Code execution and file creation (Create and edit files in newer settings) under Settings > Capabilities.
Codex
Pinned to commit 7b1ee74, the one we checked.
From your project's root folder:
tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/muaaz9329/cheap-ag.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&git -C "$tmp" sparse-checkout set -- plugin/skills/allow &&git -C "$tmp" checkout -q 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&mkdir -p .agents/skills &&mkdir .agents/skills/allow &&cp -R "$tmp"/plugin/skills/allow/. .agents/skills/allow/ &&rm -rf "$tmp"Codex picks up new skills on its own; restart it if this one does not appear.
Cursor
Pinned to commit 7b1ee74, the one we checked.
From your project's root folder:
tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/muaaz9329/cheap-ag.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&git -C "$tmp" sparse-checkout set -- plugin/skills/allow &&git -C "$tmp" checkout -q 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&mkdir -p .cursor/skills &&mkdir .cursor/skills/allow &&cp -R "$tmp"/plugin/skills/allow/. .cursor/skills/allow/ &&rm -rf "$tmp"Copilot & VS Code
Pinned to commit 7b1ee74, the one we checked.
From your project's root folder:
tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/muaaz9329/cheap-ag.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&git -C "$tmp" sparse-checkout set -- plugin/skills/allow &&git -C "$tmp" checkout -q 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&mkdir -p .github/skills &&mkdir .github/skills/allow &&cp -R "$tmp"/plugin/skills/allow/. .github/skills/allow/ &&rm -rf "$tmp"In a running Copilot CLI session, run /skills reload.
Or install it with gh skill, which also installs the commit we checked. Needs GitHub CLI 2.90 or later.
gh skill install muaaz9329/cheap-ag plugin/skills/allow/SKILL.md@7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 --agent github-copilot --scope projectGemini CLI
Pinned to commit 7b1ee74, the one we checked.
From your project's root folder:
tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/muaaz9329/cheap-ag.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&git -C "$tmp" sparse-checkout set -- plugin/skills/allow &&git -C "$tmp" checkout -q 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&mkdir -p .gemini/skills &&mkdir .gemini/skills/allow &&cp -R "$tmp"/plugin/skills/allow/. .gemini/skills/allow/ &&rm -rf "$tmp"In a running session, run /skills reload.
Or use Gemini CLI’s own installer. Installs the latest version, not the one we checked.
gemini skills install https://github.com/muaaz9329/cheap-ag.git --path plugin/skills/allow --scope workspaceAny agent
Pinned to commit 7b1ee74, the one we checked.
OpenCode, Goose, Windsurf (Devin Desktop), Zed, Roo Code, Factory Droid, Junie, Amp and Antigravity read .agents/skills in a project.
From your project's root folder:
tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/muaaz9329/cheap-ag.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&git -C "$tmp" sparse-checkout set -- plugin/skills/allow &&git -C "$tmp" checkout -q 7b1ee74e48cd946e01ee920a1eeaa514d4dfb0a8 &&mkdir -p .agents/skills &&mkdir .agents/skills/allow &&cp -R "$tmp"/plugin/skills/allow/. .agents/skills/allow/ &&rm -rf "$tmp"Or use the skills CLI from skills.sh. Installs the latest version, not the one we checked. The skills CLI reports installs to skills.sh unless you set DISABLE_TELEMETRY=1.
npx skills@1.7.4 add muaaz9329/cheap-ag --skill allowWhat it can touch
From the files and frontmatter at commit 7b1ee74. This is how much a skill can do, not whether it is risky.
Pattern check
Pattern check: 2 items to review · commit 7b1ee74 · 3 Nov 2026
We checked every text file in this skill, at commit 7b1ee74 on 3 Nov 2026, against 45 published patterns such as download-and-run commands, hidden text and credential access. We don't run the skill, we don't read the web pages it points to, and we can't judge everything its instructions might lead an agent to do. In published tests, pattern checks like this one missed most malicious skills. Read the skill before you install it — especially anything it asks you to download or run.
Format check
Each agent reads SKILL.md a little differently. We check the file against each one's published rules; we don't run the skill in any agent.
Agent Skills specPasses with warnings
The open format from agentskills.io, held to the strictest version of each rule among the agents we check.
- Warning
Fields outside the spec: argument-hint (read by Claude Code and VS Code) and disable-model-invocation (read by Claude Code and VS Code). Uploads to the Claude apps and API, and the spec's validator, reject the file; most agents ignore these fields. O1
Fix: Delete them for a portable skill, or keep them if you only target the agents that read them.
- Note
The description doesn't say when to use the skill. D6
Fix: Add a sentence such as "Use when …" naming the requests or files that should trigger it.
- Note
There is no license field, so readers can't tell whether they may reuse the skill. O2
Fix: Add license: with an SPDX name such as MIT or Apache-2.0, or the name of a bundled licence file.
- Warning
- Claude CodePasses
Claude apps & API uploadFails
Uploading to claude.ai or the Claude API, or packaging with Anthropic's script, accepts only the six spec fields and stops on anything else.
- Error
Upload and packaging fail on fields outside the spec: argument-hint and disable-model-invocation. O1
Fix: Delete them, and keep your own data under metadata as text values.
- Error
OpenAI (Codex & API)Passes with warnings
Codex finds SKILL.md by its exact name and needs a description; OpenAI's Skills API checks the frontmatter against the spec and caps uploads.
- Warning
Fields outside the spec: argument-hint and disable-model-invocation. Codex ignores them; OpenAI doesn't say whether its upload accepts them. O1
Fix: Delete them, or move your own data under metadata as text values.
- Warning
- VS Code & CopilotPasses
SKILL.md
Files
2 files
| Path | Size |
|---|---|
| SKILL.md (opens in a new tab) | 860 B |
| agents/openai.yaml (opens in a new tab) | 43 B |
More from muaaz9329/cheap-ag
| Skill | What it can touch | Pattern check | Licence | Updated |
|---|---|---|---|---|
cleanRemove Cheap Agent's old worktrees and job logs now; --all removes everything not in flight.
Pattern check: 2 items to reviewMITUpdated 2 Nov 2026 |
| Pattern check: 2 items to review | MIT | 2 Nov 2026 |
hookTurn Cheap Agent's edit guard on or off for this repo - when on, Claude's large edits (or a 3rd edit to one file in a turn) are denied and redirected to delegate.
Pattern check: 2 items to reviewMITUpdated 2 Nov 2026 |
| Pattern check: 2 items to review | MIT | 2 Nov 2026 |
plan-writingWrite or fix a Cheap Agent plan file before calling the cheapag delegate tool. Use when planning a change of more than ~20 lines or several files for the cheap worker, splitting work into steps, or after delegate rejects a plan.
Pattern check: Nothing flaggedMITUpdated 2 Nov 2026 |
| Pattern check: Nothing flagged | MIT | 2 Nov 2026 |
statusShow Cheap Agent's status for this repo - running jobs, recent results, consent, and tracked spend against OpenCode Go windows.
Pattern check: 2 items to reviewMITUpdated 2 Nov 2026 |
| Pattern check: 2 items to review | MIT | 2 Nov 2026 |
Other AI & ML engineering skills
Same category, most repo stars first.