📦

herdr

Name: herdr
Author: herdrdev

مراجعة المحتوى r1 آمن ⚙️ الأوامر الخارجية

Control Herdr Workspaces and Coding Agents

Managing several coding agents across terminal panes can make state, focus, and output difficult to track. This skill uses Herdr commands to organize panes, coordinate agents, run commands, and inspect results.

يدعم: Claude Codex Code(CC)

🥉 78 برونزي

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "herdr" from https://skillstore.io/skills/herdrdev-herdr.md and its manifest at https://skillstore.io/api/skills/herdrdev-herdr/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/herdrdev-herdr.md manifest موقَّع GET /api/skills/herdrdev-herdr/manifest lockfile موقَّع GET /api/skills/herdrdev-herdr/lockfile

اختبرها

جارٍ استخدام "herdr". Use Herdr to inspect the current session without changing focus.

النتيجة المتوقعة:

Current workspace: w1
Active tab: w1:t1
Two panes are available, with one idle coding agent.

جارٍ استخدام "herdr". Use Herdr to run the project tests in a sibling pane and summarize the result.

النتيجة المتوقعة:

The tests completed in a background pane. All 48 tests passed, and the user focus remained in the original pane.

جارٍ استخدام "herdr". Use Herdr to ask a reviewer agent for actionable findings.

النتيجة المتوقعة:

The reviewer reached a settled state and reported two actionable findings concerning timeout handling and missing error-path coverage.

التدقيق الأمني

آمن

v1 • ١٤‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most alerts are false positives caused by Markdown code fences and inline code being mistaken for Ruby backtick execution. Seven examples perform real Herdr mutations, including launching agents, sending input, changing layout, and running a shell command; these capabilities are expected but require deliberate targeting.

الملفات التي تم فحصها

196

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

عناصر مراجعة القدرات (7)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

متوسط

SKILL.md:102-104

Ruby/shell backtick execution

```bash

The fenced example invokes `herdr pane split`, which mutates terminal layout. The fixed operation is purposeful and preserves focus, but it is real external command execution.

متوسط

SKILL.md:110-112

Ruby/shell backtick execution

```bash

The example starts a Codex process in a selected pane through `herdr agent start`. Launching another agent is intended, but it consumes resources and grants that process access to the working directory.

متوسط

SKILL.md:116-118

Ruby/shell backtick execution

```bash

This example starts an agent and forwards native agent arguments after `--`. The operation is intentional, but caller-supplied arguments can materially change the launched process.

متوسط

SKILL.md:124-126

Ruby/shell backtick execution

```bash

The example sends an instruction to a live coding agent with `herdr agent prompt`. That agent may modify files or execute tools, so target selection and user intent are security-relevant.

متوسط

SKILL.md:142-145

Ruby/shell backtick execution

```bash

The examples send Escape and Ctrl+C keystrokes to another agent. These commands can interrupt or alter an active process, making the external control capability a real operational risk.

متوسط

SKILL.md:160-162

Ruby/shell backtick execution

```bash

The fenced example invokes `herdr pane split`, which changes the current terminal layout. It is bounded and keeps focus unchanged, but still performs a real mutating external command.

متوسط

SKILL.md:166-170

Ruby/shell backtick execution

```bash

The example uses `herdr pane run` to execute command text in another shell pane. This is an explicit arbitrary-command capability, even though the shown command is a benign test invocation.

عوامل الخطر

⚙️ الأوامر الخارجية (50)

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/herdrdev-herdr/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/herdrdev-herdr/security.svg)](https://skillstore.io/skills/herdrdev-herdr?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/herdrdev-herdr?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/herdrdev-herdr/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/herdrdev-herdr.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

herdrdev. (2026). herdr security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/herdrdev-herdr/audits/1

اقتباس BibTeX

@techreport{herdrdev-herdrdev-herdr-2026,
  author = {herdrdev},
  title = {herdr security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/herdrdev-herdr/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "herdr security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "herdrdev"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/herdrdev-herdr/audits/1"
identifiers:
  - type: other
    value: "skillstore:herdrdev-herdr:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Coordinate a code review

Create a sibling pane, start a reviewer agent, send the review request, and collect actionable findings.

Run tests beside active work

Open a background pane, run the requested test command, wait for completion text, and inspect recent output.

Inspect parallel agent progress

List active agents, check lifecycle states, and read output without changing the user interface focus.

جرّب هذه الموجّهات

Inspect the current session

Use Herdr to list the current workspace, tabs, panes, and agents. Summarize their identifiers and states without changing focus.

Run a background test

Use Herdr to create a sibling pane in the current directory. Run [test command], wait for completion, and summarize the output.

Delegate a focused review

Use Herdr to start a [agent kind] agent named [name] in a sibling pane. Ask it to review [scope] and return actionable findings.

Coordinate parallel investigation

Use Herdr to start two named agents for [task A] and [task B]. Preserve focus, monitor both, and consolidate their verified results.

أفضل الممارسات

Verify HERDR_ENV before issuing any Herdr control command.
Use explicit pane identifiers or unique agent names, and parse identifiers from command responses.
Preserve the current directory and user focus unless the user requests a different layout.

تجنب

Do not invoke Herdr unless the user explicitly requests Herdr.
Do not guess identifiers or rely on another client focus.
Do not close sessions or stop servers without explicit user authorization.

الأسئلة المتكررة

What must be installed before using this skill?

The herdr binary must be available in PATH, and the current process must have HERDR_ENV set to 1.

Can this skill control Herdr from outside a managed pane?

No. The skill stops when the Herdr environment check fails.

Can it start Claude, Codex, or Claude Code agents?

It can start agent kinds supported by the installed Herdr version. The requested kind must be locally available.

Does it keep the current terminal focus?

Yes, background workflows use no-focus controls unless the user requests a focus change.

Can it run ordinary shell commands?

Yes. It can run requested command text in a selected pane, wait for output, and read the result.

How does it handle blocked agents?

It inspects the agent state and recent output before sending deliberate keys or additional input.

تفاصيل المطور

المؤلف

herdrdev

الترخيص

MIT

مراجعة Skillstore

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

المستودع

https://github.com/herdrdev/herdr/tree/d76657f2c7fc18dcce3b9af43842c8afaba1646b/skills/herdr

مرجع

2d1a4712a46e152244a21c2b88e7479563580ea2

حداثة الصيانة

١٤‏/٨‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📄 SKILL.md