Agentic Routines

Directory guidelines

The Directory is a list of routines other people run in their own signed-in browser. A routine can do anything its owner can do on a site, so every routine is read before it is listed. These are the rules we read against. Each has a number so a rejection can point to it.

How review works

  • Every submission is reviewed, every time. A new routine, and every update to a routine that is already listed.
  • Automated checks run first. They catch what a machine can catch: steps that leave the routine's site, saved secrets, unknown actions, missing pauses. They never approve anything on their own.
  • A person then reads the routine and decides: approve, or reject with the number of the guideline it breaks and a note you can act on.
  • Until a submission is approved it is not public. The version that is already listed stays listed while its update waits.
  • We can turn a listed routine off, or block a publisher, at any time. We say why.
  • Routines installed from a Git repository are not reviewed by us. The extension tells the person that and shows every step before it installs.

Guidelines

G1. One clear job. The name and the description say what the routine does and when to use it. The description includes a line that starts with "Use when". A routine that does several unrelated things is split.

G2. Stay on one site. Every step is on the site the routine names. A routine does not send people to another site, and does not act on a site it did not declare.

G3. Nothing personal or secret inside. No passwords, tokens, card numbers, account numbers or anyone's personal details in a step. Anything that changes between runs is an input the person fills in. A value you typed while recording and did not turn into an input is published, so check each one.

G4. Pause before what cannot be undone. Paying, sending money, deleting, sending a message, publishing, submitting a filing or an order: the routine stops and waits for the person before the final step.

G5. No harm, no deception. No routine that harvests data, spams, commits fraud, takes over or abuses accounts, or works around a site's security or sign-in checks. No routine that hides what it does from the person running it.

G6. Respect the site and the person. A routine does not put the person's account at risk by breaking the site's rules, for example by acting in bulk where the site forbids it.

G7. Be honest about who made it. Your handle is yours. Do not pass a routine off as someone else's, or use a name that imitates a person or a company. You must have the right to share what you submit.

G8. Keep it working. When a site changes and the routine breaks, fix it or withdraw it. Routines that stay broken are turned off.

When a submission is rejected

The message names the guideline and says what to change. Fix it and submit again; it is reviewed again from the start. If you think we got it wrong, reply to the rejection and say why.

Changes

These guidelines will change as we learn what people submit. A change that makes a listed routine break a guideline gives its publisher time to fix it before the routine is turned off, unless it is unsafe.