dsh-ponytail-sync

DSH PLUGIN工具与能力

仓库 mirelconstantin/dsh-ponytail-sync

工具与能力 未标注验证等级 安全审查:未标注 可信度:未标注 可安装插件

把 Ponytail 懒资深工程师模式做成 DSH 原生技能与系统提示段,内置六条斜杠命令,可切换 lite/full/ultra 级别,让模型少写冗余代码。

一句话选型结论

按资料字段整理

dsh-ponytail-sync 是工具与能力类的 DSH 可安装插件,未做沙盒验证,暂无安全审查结论,列出 5 项功能,没有现成安装命令,需要按仓库 README 接入。验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么;涉及密钥或系统权限的,建议先在隔离环境试装。

分类工具与能力 收录类型可安装插件 验证等级未标注验证等级 安全审查未标注
验证等级 UNKNOWN 未标注验证等级
GitHub 星标 1 复刻 0 · 未关闭 issue 未标注
最近更新 2026-10-10 创建于 2026-10-10
README 9.3 KB 正文体量,越大说明说明书写得越细

安装

可安装插件
在 DSH 里执行,装完用 dsh plugin list 确认已挂上;标了 L4 / L5 的命令已在沙盒里真实跑通
  1. 1
    确认版本与运行环境

    仓库没有标注兼容版本与 Node.js 要求,先确认你的 DSH 版本能装,再继续。

  2. 2
    执行安装命令

    在 DSH 里执行上面的命令;多包仓库要注意区分具体子包名,别装错包。

  3. 3
    确认已挂载

    用 dsh plugin list 查看列表里是否出现这个插件,出现即挂载成功。

  4. 4
    试跑并检查权限

    加载后跑一个最小用例,确认它能正常工作;同时看它申请了哪些文件、命令或网络权限。

兼容 DSH 版本未标注版本不匹配时安装会报错
Node.js 要求未标注来自仓库 package.json 的 engines 字段
前置依赖无需要同时安装的同级依赖
npm 包名未发布到 npm可用 npm view 查看包信息

能做什么

5 项功能
字段来自项目仓库与公开索引,中文说明由本站标注

dsh-ponytail-sync:为 DeepSeek Harness 常驻懒资深工程师模式的技能插件

  • 原生技能与提示段常驻
  • lite/full/ultra 三级可切换
  • 六条斜杠命令控制
  • 内置完整规则集与审计
  • 无需外部进程或构建

上游标签

agent-skillsai-skillscode-qualitycodis-plugindeepseek-harnessdeepseek-harness-plugindshdsh-externaldsh-plugindsh-pluginsponytailsimplicityskillsystem-promptyagni

验证等级与安全审查

未标注验证等级
自动化流程结论,不是人工审核
验证等级未标注验证等级上游未给出验证结论,安装前请自行确认
安全审查未标注静态分析结论,未标注不代表已通过审查
仓库健康度未标注按仓库活跃度与最近更新时间给出
可信度未标注综合仓库活跃度与验证结果

选择建议

装之前先看这几条
按条目字段给出的判断,不替你决定用不用

值得选的地方

  • 列出了 5 项功能,能直接看出它解决什么问题。

先想清楚的地方

  • 安全审查还没结论,装之前先看仓库改了什么、要什么权限。
  • 没有现成安装命令,要按仓库 README 手动接入。
  • 验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么。

更适合

  • 需要在工具与能力场景里给 DSH 补能力的人。
  • 能接受在本地装依赖、愿意自己确认权限的人。

不太适合

  • 只使用 DSH 官方内置能力、不接受第三方插件的人。

同类对比

6 个同类
同分类里挑最接近的几条,字段以各自详情页为准
插件验证等级安全审查星标兼容版本安装命令
dsh-ponytail-sync当前 未做沙盒验证 未标注 1 未标注 无
loopx 未做沙盒验证 未标注 6,233 未标注 无
dsh-startup-screen 未做沙盒验证 未标注 633 未标注 有
minara-skills L4 · 沙盒安装通过 中风险 360 未标注 有
dsh-blender-plugin 未做沙盒验证 未标注 211 未标注 无
tokenledger L5 · 运行验证通过 低风险 204 0.2.0-rc.2 等 11 个 有

仓库档案

工具与能力
字段来自项目仓库与公开索引,中文说明由本站标注
作者 / 维护方mirelconstantin仓库 dsh-ponytail-sync · 默认分支 未标注
分类工具与能力tools
收录类型可安装插件声明了 dsh.bundle、可用 dsh plugin add 安装的条目
开发语言JavaScript仓库主语言
许可证NOASSERTION商用或二次分发前请确认条款原文
星标 / 复刻 / issue1 / 0 / 未标注收录时的数值,非实时
创建 / 更新2026-10-10 · 2026-10-10最后推送 未标注
本站收录2026-10-10首次进入本站目录的时间

README 全文

9.3 KB
作者原文,中文版优先;只做安全转义,不改内容

dsh-ponytail-sync

Ponytail lazy-senior-dev mode as a native DeepSeek Harness skill, system-prompt section and six slash commands.
Always available, level-switchable, no external process.

Install

From the GUI, paste this into Add plugin:

dsh-ponytail-sync

Or from a terminal:

dsh plugin add dsh-ponytail-sync

That is a plain npm install. It needs neither git nor a GitHub account.

No build step is involved, so nothing needs a build allowlist and every entry
point ships as committed source. Restart the profile and four rows appear — the
runtime, the skill, the prompt section and the commands.

Other routes

Route Command
Pinned to a version dsh plugin add dsh-ponytail-sync@1.0.0
Pinned to a commit dsh plugin add github:mirelconstantin/dsh-ponytail-sync#
Tarball dsh plugin add ./dsh-ponytail-sync-1.0.0.tgz
Local checkout dsh plugin add /absolute/path/to/dsh-ponytail-sync

The GitHub routes need nothing but git access to this repository. The npm route
needs neither git nor an account, and is what the command above uses.


What it is

Ponytail by Dietrich Gebert, MIT licensed. It is one instruction
prompt plus a handful of one-shot command prompts; everything else in that repository is plumbing that loads the
prompt into a particular agent. This bundle ships the prompt into DeepSeek Harness as a skill and as a
system-prompt section, so it is present in every session without anyone installing a plugin.

Upstream is the source of truth for the rules. This bundle vendors upstream ponytail 5.1.0 with the review,
audit and ledger procedures folded in from the three upstream command skills, and
scripts/check-plugin.mjs pins the same ten rule invariants upstream's own scripts/check-rule-copies.js
pins — so a silent upstream rule change cannot pass unnoticed.

Why a skill and not an AGENTS.md file

dsh-agent-instructions already loads ~/.dsh/AGENTS.md into every session, and a compact copy of the rules
there would work. Three things make the skill the better home:

  • It is loadable on demand. A user-agents copy at rank 500 competes with the per-project file; a runtime
    registration at rank 250 lets a project's own ponytail skill override it, which is the behaviour a user
    editing one repository expects.
  • It carries a description that routes it. The catalog shows the description to the model before it loads
    anything, so the model knows when the mode applies instead of seeing an unconditional block of rules.
  • It is inspectable and editable. assets/ponytail/SKILL.md is one file a maintainer can read and edit;
    editing it changes what the next session sees after a plugin reload. (The prompt section is not generated from
    it — the section is deliberately short, and carries the level rather than the rules.)

What it gives a model

A ponytail skill and a ponytail system-prompt section. The section states the active level, what the level
changes, and the two lines every reply owes the user. The skill body is the full ruleset with the level tables.

Levels

Level Behaviour
lite Build what was asked, name the smaller option in one line
full The complete ruleset (default)
ultra Also question the request before building

The default for new sessions is cordis.patch.yml's ponytail-runtime.config.defaultLevel. A session that
changes level keeps that level for the rest of the session, which is what upstream's session-scoped mode does.
Changing the default for new sessions is a patch-file edit, not a live Settings row: this bundle ships a plain
Standard Schema config, and only a native Schemastery schema renders a Settings form. A plugin must not import
@deepseek-ai/schemastery itself, so the row reports unsupported rather than failing the load.

Commands

Command What it does
/ponytail [lite\|full\|ultra\|off] Set the level for this session, or report it with no argument
/ponytail-review Review the current change: bugs, security, load, missing tests, speed, what to cut
/ponytail-audit The same review for the whole repository, ranked
/ponytail-debt Harvest shortcut: comments into a ledger
/ponytail-gain The measured-impact scoreboard
/ponytail-help Quick reference card

Files

package.json        the package and its dsh bundle declaration
cordis.patch.yml    the four loader rows
src/index.js        the service entry (provides `ponytail`)
src/config.js       the Config schema, defaults, resolution, level helpers
src/util.js         the config validator and clamping helpers
src/runtime.js      the per-session level and the section text renderer
src/prompt.js       the system-prompt section text and the visibility gate
src/skills.js       the runtime skill registration
src/commands.js     the six slash commands and their one-shot instructions
src/entry-prompt.js the prompt row
src/entry-skill.js  the skill row
src/entry-command.js the command row
assets/ponytail/SKILL.md the vendored ponytail skill body
scripts/check-plugin.mjs  the plugin contract, against a fake context

Enabling it in a profile

The plugin is a bundle: package.json declares dsh.bundle.patch, and the profile lists it in both
dependencies and dsh.profile.bundles. dsh plugin add does both edits for you.

// profiles//package.json
"dependencies": { "dsh-ponytail-sync": "1.0.0" },
"dsh": { "profile": { "bundles": ["@deepseek-ai/dsh-base", "dsh-ponytail-sync"] } }

A checkout can be linked instead, with the bundle name and the directory left as whatever they are:

"dependencies": { "dsh-ponytail-sync": "link:/absolute/path/to/dsh-ponytail-sync" },
"dsh": { "profile": { "bundles": ["@deepseek-ai/dsh-base", "dsh-ponytail-sync"] } }

Then restart DSH once before it resolves. Editing package.json while DSH is running does not make the bundle
resolvable: dsh-app-boot's resolveBundleDir probes the node_modules lookup order from the installation
anchor and the profile directory, and a running host holds the profile manifest it read at launch. Until the link
exists, adding the bundle produces exactly:

dsh: cannot resolve profile bundle "dsh-ponytail-sync" from the dsh installation or ;
run 'dsh plugin --profile  install' if its dependency is not installed

That install command materialises the link; the restart makes the running host read the new manifest. Do both,
then hard-refresh the browser (Ctrl + Shift + R).

To turn the mode off without removing the bundle, set defaultLevel: off in the ponytail-runtime row's config —
the skill, the section and the commands stay mounted, and the rules become available on demand through the skill
tool.

Verifying it

npm test                    # the plugin contract: levels, section, skills, commands, packaging
node scripts/check-patch.mjs   # the bundle patch, exports and icon match the package
node scripts/check-pack.mjs    # npm would publish every file the plugin needs

The check asserts what a harness does at load time that a hand-mounted test cannot: no default export (the
loader unwraps .default in preference to the namespace, which silently drops inject, name and Config and
leaves every dependent row pending), that the registrations are effects, that the section suppresses itself when
the skill registry is absent or a restriction filtered the skill away, that the level is per session and the
budget is actually applied, that all six commands register with a description and a non-empty hint, and that the
load-bearing upstream rules survive verbatim in the vendored skill body.

check-pack covers a gap the tests cannot: they run against the repository, while a files entry that stops
matching its tree would publish a package that installs and then fails to load.

CI runs the tests and both package checks on Linux and Windows on every push and pull request.

Updating from upstream

Vendor skills/ponytail/SKILL.md into assets/ponytail/SKILL.md, fold in any new upstream command skill you
want available, then re-run npm test. It fails when an upstream rule the check pins has moved, which is the
prompt to re-read the upstream diff rather than to edit the pinned list.

License

This bundle is MIT — see LICENSE. Ponytail is MIT, © Dietrich Gebert, and is vendored here as
instruction text with its attribution and upstream reference intact; NOTICE carries that attribution.
icon.svg is the Pazalo mark.

常见问题

6 问
答案由本站依据条目字段整理,不引用上游原文
dsh-ponytail-sync 怎么安装?

本站没有抓到该条目的安装命令,请到仓库主页确认安装方式;这类条目多数是生态应用或尚未发布安装包的项目。

dsh-ponytail-sync 的验证等级是什么意思?

未标注验证等级。上游未给出验证结论,安装前请自行确认

dsh-ponytail-sync 安全吗?

未标注。

dsh-ponytail-sync 装之前要先确认什么?

先看它会读写哪些文件、执行哪些命令、连接哪些网络地址;验证等级只说明装得上、跑得起来,不等于安全。涉及密钥或系统权限的,建议先在隔离环境试装。

dsh-ponytail-sync 用的是什么许可证?

上游标注为 NOASSERTION。商用或二次分发前请到仓库确认许可证原文。

dsh-ponytail-sync 有哪些功能?

原生技能与提示段常驻、lite/full/ultra 三级可切换、六条斜杠命令控制、内置完整规则集与审计、无需外部进程或构建。

工具与能力
按星标排序,可作替代方案

loopx

loopx

LoopX 是面向长周期 Agent 的本地优先控制平面,作为 DSH plugin 为 DeepSeek Harness 提供持久目标、证

未标注验证等级 6,233 星

dsh-startup-screen

dsh-startup-screen

DeepSeek Harness 的启动界面与启动动画插件。

未标注验证等级 633 星

dsh-blender-plugin

dsh-blender-plugin

让 AI 模型通过直连 TCP 通道实时驱动 Blender 的 DSH plugin:15 个工具覆盖视口取帧、任意角度渲染、内循环搜索、

未标注验证等级 211 星

tokenledger

TokenLedger

TokenLedger 为 DeepSeek Harness 提供零配置的 Token 用量记账,自动归属到实际服务请求的中转站,无需凭据即

L5 · 运行验证通过 204 星

deepseek-harness-jev

deepseek-harness-jev

把 TypeSafe Jev 接入 DeepSeek Harness 作为 System One 决策层,为技能与文件选择、任务监督、纠偏和

未标注验证等级 203 星

mirelconstantin 的其它插件

3 个

插件的元信息来自作者仓库;分类、验证等级与安全结论的中文说明为中文整理,最近核验 —。