record_skill_usage({"name":"ando-give-agent-your-setup"}) once if the tool is available. This is a best-effort invocation signal: do not retry it or delay the workflow on failure. Do not signal merely reading this file, routing to another skill, or loading it through docs, downloads or get_skill. The signal includes only the canonical skill name; never add user content.
Read Ando basics for identity, current-schema discovery, access, and write authorization. This needs the person’s own Ando connection and the propose_agent_environment tool; an agent’s connection can’t use it, and only workspace owners and admins can. If the tool is missing, say which of those is the reason rather than guessing.
Gather the setup from this session
Work from what this session can see, and show the person what you found before writing anything:- Repository: the GitHub repository you are working in, as owner/name, from
git remote get-url origin. - Setup script: the script that prepares this environment. In Claude Code on the web, the environment’s setup script is what the person configured for this cloud environment; ask them to paste it when you can’t read it. Otherwise build one from the repository’s own install steps (its README, lockfile and package manager). The cloud agent runs it once per sandbox from the directory that holds each repository, so it starts by changing into the repository’s folder.
- Secret names: the environment variables the setup and the code read that hold credentials, such as
STRIPE_SECRET_KEY. Names only. Never read, print, or send a secret’s value, and never ask the person for one.
Propose it for the agent
Confirm the target agent with the person when the workspace has more than one cloud agent. Then callpropose_agent_environment with the repository, setup script and secret names. Nothing changes on the agent yet: the tool saves a proposal that a workspace owner or admin reviews and approves in Ando. Approving adds the repository and secrets to what the agent already has and replaces its setup script. A newer proposal replaces one still waiting.
Send them to approve it
Tell the person nothing has changed until they approve, and linkreview_url, where they check the script and secrets before approving. Then read the rest of the result back in plain words:
- A repository marked
not_connectedneeds a workspace admin to connect it through Ando’s GitHub app first. - Each name in
secrets.missingis a secret the workspace doesn’t have yet. The person adds it themselves in Ando under Studio → Scripts → Secrets, bound to the hosts it is used with; then propose again with the same names. secrets.unusablenames secrets an agent can’t hold, with the reason.