技能 ponytail-help
📦
ponytail-help
內容修訂 r1 安全 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取
Find Ponytail Commands and Mode Settings
Ponytail users need a clear reference for modes, commands, and configuration. This skill displays that reference once without changing modes or saving state.
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "ponytail-help" from https://skillstore.io/skills/dietrichgebert-ponytail-help.md and its manifest at https://skillstore.io/api/skills/dietrichgebert-ponytail-help/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「ponytail-help」。 Show the Ponytail modes from the help card.
預期結果:
- Lite: build the requested solution and name a simpler alternative.
- Full: prioritize necessity, standard libraries, native features, and minimal implementation.
- Ultra: question requirements and consider deletion before adding code.
正在使用「ponytail-help」。 What does the help card say about default modes?
預期結果:
- The documented default is Full.
- The environment variable takes precedence over the configuration file.
- The configuration file takes precedence over the default.
- The off setting disables automatic activation at session start.
正在使用「ponytail-help」。 Which companion skills are listed?
預期結果:
- Ponytail provides the main simplification mode.
- Ponytail Review describes an over-engineering review.
- Ponytail Audit describes a repository-wide over-engineering audit.
- Ponytail Debt tracks shortcut comments, while Ponytail Gain reports measured impact.
- Ponytail Help displays this reference.
安全審計
安全v1 • 2026/10/5 開啟版本化報告
All 27 static findings are false positives from Markdown formatting, a documented configuration path, and a reference link. The skill explicitly prohibits mode changes, flag writes, and persistence during help display. No evidence found of prompt injection, credential access, exfiltration, or unauthorized execution in the reviewed file.
1
已掃描檔案
72
分析行數
0
複核項目
0
已忽略的誤報
風險因素
⚙️ 外部命令 (24)
SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:35 SKILL.md:36 SKILL.md:41 SKILL.md:42 SKILL.md:46 SKILL.md:49-51 SKILL.md:51-53 SKILL.md:53 SKILL.md:54-56 SKILL.md:56-58 SKILL.md:58-59 SKILL.md:59-61 SKILL.md:61-65 SKILL.md:65 SKILL.md:67
🌐 網路存取 (1)
📁 檔案系統存取 (2)
最近一次完成的靜態與語意稽核未偵測到已確認的安全發現。這並不能證明該 Skill 沒有副作用。
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/dietrichgebert-ponytail-help/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/dietrichgebert-ponytail-help?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/dietrichgebert-ponytail-help?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dietrichgebert-ponytail-help/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/dietrichgebert-ponytail-help.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
dietrichgebert. (2026). ponytail-help security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dietrichgebert-ponytail-help/audits/1BibTeX 引用
@techreport{dietrichgebert-dietrichgebert-ponytail-help-2026,
author = {dietrichgebert},
title = {ponytail-help security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/dietrichgebert-ponytail-help/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ponytail-help security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "dietrichgebert"
date-released: "2026-10-05"
url: "https://skillstore.io/skills/dietrichgebert-ponytail-help/audits/1"
identifiers:
- type: other
value: "skillstore:dietrichgebert-ponytail-help:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
85
內容
65
社群
91
規範符合度
你可以打造什麼
Learn the available modes
Read the Lite, Full, and Ultra descriptions before choosing a Ponytail mode.
Find a review command
Locate the companion skill for reviewing over-engineering or auditing an entire repository.
Check configuration guidance
Consult default-mode precedence, deactivation options, and host-specific update instructions without modifying settings.
試試這些提示
Show the reference
Show the Ponytail help card.
Find mode controls
Show Ponytail help so I can compare Lite, Full, and Ultra and find the deactivation commands.
Locate companion skills
Display Ponytail help with the review, audit, debt, and gain command descriptions. Do not invoke those skills.
Check defaults and updates
Display Ponytail help, including default-mode precedence, Codex invocation syntax, and update guidance. Do not change configuration or run updates.
最佳實務
- Consult the reference before selecting a mode or companion skill.
- Use the documented invocation syntax for your host.
- Review update and configuration instructions before applying changes separately.
避免
- Expecting the help card to activate a mode or persist settings.
- Treating listed companion capabilities as actions performed by this skill.
- Assuming the reference verifies your installed version or command availability.
常見問題
Does displaying help change my current mode?
No. The skill explicitly requires a one-time display without mode changes, flag writes, or persistence.
Which Ponytail levels are listed?
The reference lists Lite, Full, and Ultra. It identifies Full as the default.
Does this skill review or audit my code?
No. It describes the separate review and audit skills and shows their triggers.
How does default-mode precedence work?
The documented order is environment variable, configuration file, then Full. The off setting disables automatic activation.
How do invocation forms differ between hosts?
The card documents dollar-prefixed, namespaced skill invocations for Codex and slash commands for Claude Code and OpenCode.
Does the help skill install updates?
No. It displays plugin update guidance and Claude Code upgrade alternatives for users to apply separately.
開發者詳細資訊
授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
823e459a291299e7796aba8cff0a961cb21ea0c4
維護新鮮度
2026/10/5
使用量
0 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md