ponytail-audit

by DietrichGebert 97k MIT Updated Jul 15, 2026
ponytail-audit skill by DietrichGebert
Social preview for DietrichGebert/ponytail

ponytail-audit is an open-source security skill for Claude Code and compatible agents, published by DietrichGebert. Its author describes it as: “Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user say…”. The project has 97k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add DietrichGebert/ponytail`.

Installation

Add ponytail-audit to your agent with:

/plugin marketplace add DietrichGebert/ponytail

Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.

When to use it

Reach for ponytail-audit when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.

Strengths

  • Clear MIT license — safe to read and adapt
  • Ships in DietrichGebert/ponytail, an established project with 97,036 GitHub stars
  • Actively maintained (recent commits)

Topics

agent-skillsai-agentsclaudeclaude-codeclaude-code-plugincursor-rulesdeveloper-toolsllmprompt-engineeringyagni

Frequently asked questions

What does ponytail-audit do?
Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit this codebase", "audit for over-engineering", "what can I delete from this repo", "find bloat", "ponytail-audit", or "/ponytail-audit". One-shot report, does not apply fixes.
How do I install ponytail-audit?
Run /plugin marketplace add DietrichGebert/ponytail in your agent, then reload your skills. Review the source at https://github.com/DietrichGebert/ponytail before installing.
Is ponytail-audit free to use?
Yes. ponytail-audit is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
Where does ponytail-audit come from?
ponytail-audit ships inside DietrichGebert/ponytail, a repository that contains 6 catalogued skills in total. The repository's 97,036 GitHub stars apply to that whole collection, not to this skill on its own.

Related skills

More Security →

State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.

8 martinholovsky CC-BY-4.0

Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a target). Prefers direct-CDP live-DOM auditing; falls back to a browser-MCP composition or HTML-string audits.

45k sickn33 MIT

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.

45k sickn33 MIT