
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
ponytail-dsh
Advanced tools
Ponytail for DSH: per-session coding rules, mode commands and bundled review skills.
Ponytail coding rules for DSH: six bundled skills, per-agent mode persistence, and a dynamic system-prompt section evaluated before every model step.
name / Config / apply ESM plugin contract with no default export./ponytail [off|lite|full|ultra] command. The selected mode is stored as a
log-only ponytail/mode session event, so resumed sessions restore it.systemPrompt.section injection scoped to the receiving Agent. off
contributes no Ponytail rules; all other modes use the packaged Ponytail
rules and their matching intensity row.ctx.skills: ponytail,
ponytail-review, ponytail-audit, ponytail-debt, ponytail-gain, and
ponytail-help.pnpm install
pnpm test
pnpm build
dsh plugin --profile dsh-tui add ponytail-dsh
dsh --profile dsh-tui
Add the profile bundle with cordis.patch.yml, or load the package in an
existing Cordis profile. The bundle assumes the host provides the DSH
systemPrompt, commands, skills, and agent/session services.
src/index.ts DSH plugin entry, prompt section, commands, lifecycle
src/core/index.ts mode parsing, rule filtering, packaged skill loading
src/events.ts durable mode event and SessionEventMap augmentation
src/registration.ts known session-event registration for resume safety
skills/ bundled Ponytail skill resources
cordis.patch.yml profile insertion row
The core was adapted from Ponytail 4.9.0. See THIRD_PARTY_NOTICES.md and
LICENSE for attribution and licensing. The original /Users/harness/ponytail
checkout is not a runtime dependency.
FAQs
Ponytail for DSH: per-session coding rules, mode commands and bundled review skills.
The npm package ponytail-dsh receives a total of 6 weekly downloads. As such, ponytail-dsh popularity was classified as not popular.
We found that ponytail-dsh demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.