菜单
When the user asks you to read, write, or check a file in your home directory, use the file.read / file.write tools — they're $HOME-jailed and safer than bash cat.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
When a task can't be done with the other curated tools (file.read, http.get, tasks.create, mail.list, etc.), use bash — runs any shell command on the agent host through the DDISA grant cycle.
When the user asks to fetch a webpage, hit a REST API, or POST JSON to an endpoint, use the http.get / http.post tools — never invent URLs.
When the user asks about their inbox — what's there, search for an email, recent unread — use mail.list / mail.search.
When the user wants to see, create, or schedule a task/reminder/wiedervorlage on their personal task list, use tasks.list / tasks.create.
When the user asks for the current time, date, or wants a sanity-check that the runtime is alive, use the time.now tool — never guess.
OpenAPE Shapes — grant-aware CLI wrappers with adapter registry for structured, auditable command execution
| name | file |
| description | When the user asks you to read, write, or check a file in your home directory, use the file.read / file.write tools — they're $HOME-jailed and safer than bash cat. |
| metadata | {"openape":{"requires_tools":["file.read"]}} |
Both tools are restricted to the agent's $HOME directory:
path is resolved relative to $HOME (~/ prefix accepted, or plain notes.md).. segments that would escape $HOME are rejectedFor files outside $HOME (e.g. /etc/..., another user's directory), use bash with cat/tee — that goes through the DDISA grant cycle so the owner can approve broad-fs reads explicitly.
Read a JSON config:
file.read({ "path": "~/.openape/agent/agent.json" })
Append a note (read-modify-write — there's no file.append):
const r = file.read({ "path": "notes.md" })
file.write({ "path": "notes.md", "content": r.content + "\n- new line\n" })
$HOME. Don't prefix with /Users/....bash for non-text I/O.