ops-env-safe

分类: 工具与效率 | 上传者: CtriXin | 下载: 0 | 版本: v1.0（最新）

当隔离的“mms/mmc/Codex”会话需要工具或配置的主机路径提示而不继承真正的“HOME/XDG”或机密时使用。触发配置在哪、路径在哪、gh 配置路径、剧作家缓存路径、共享 bin 路径、隔离会话查找工具或想要只读主机路径查找等请求。

更新日志: Source: GitHub https://github.com/CtriXin/multi-model-switch

目录结构

当前层级: tree/main/assets/optional-packs/ops-env-safe/

📄 SKILL.md 1.6 KB

SKILL.md

---
name: ops-env-safe
description: "Use when an isolated `mms/mmc/Codex` session needs host path hints for tools or configs without inheriting real `HOME/XDG` or secrets. Trigger on requests like 配置在哪, path 在哪, gh config path, playwright cache path, shared bin path, isolated session 找不到工具, or wanting read-only host path lookup."
---

# Ops Env Safe

Use this skill when an isolated session only needs to know where stable host paths live.

## Default workflow

1. Prefer `MMS_HOST_CONTEXT_JSON` when present; it is the session-local dynamic context generated by MMS.
2. Otherwise read `MMS_OPS_ENV_SAFE_CONFIG` or `~/.config/mms/ops-env-safe.toml` if it exists.
3. Treat both files as path/capability maps only, not as permission to inherit the host environment.
4. Answer with concrete paths and, when needed, run only read-only checks.

## Allowed checks

- `test -e`
- `ls`
- `stat`
- `readlink`
- `command -v`
- reading the configured map file itself

## Hard red lines

- never set real `HOME`
- never set any real `XDG_*`
- never export tokens or auth env
- never bootstrap `bash -lc` / `zsh -lc` just to make host tools visible
- never claim a path lookup is equivalent to a logged-in command execution
- for logged-in Chrome tasks, use `web-access` through the configured localhost proxy; do not fall back to isolated browsers just because `HOME` is sandboxed

## Response pattern

- real path: `<absolute path>`
- purpose: `<what this path is for>`
- boundary: `path-only, no host env injection`
- when execution is needed: `switch to a separate non-isolated host shell`

登录后下载/点赞/收藏 ❤ 8 | ★ 0

ops-env-safe

目录结构

SKILL.md

举报内容

提示