State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.
ponytail-audit
ponytail-audit is an open-source security skill for Claude Code and compatible agents, published by DietrichGebert. Its author describes it as: “Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user say…”. The project has 97k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add DietrichGebert/ponytail`.
Installation
Add ponytail-audit to your agent with:
/plugin marketplace add DietrichGebert/ponytail Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
When to use it
Reach for ponytail-audit when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear MIT license — safe to read and adapt
- Ships in DietrichGebert/ponytail, an established project with 97,036 GitHub stars
- Actively maintained (recent commits)
Topics
Frequently asked questions
- What does ponytail-audit do?
- Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit this codebase", "audit for over-engineering", "what can I delete from this repo", "find bloat", "ponytail-audit", or "/ponytail-audit". One-shot report, does not apply fixes.
- How do I install ponytail-audit?
- Run /plugin marketplace add DietrichGebert/ponytail in your agent, then reload your skills. Review the source at https://github.com/DietrichGebert/ponytail before installing.
- Is ponytail-audit free to use?
- Yes. ponytail-audit is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Where does ponytail-audit come from?
- ponytail-audit ships inside DietrichGebert/ponytail, a repository that contains 6 catalogued skills in total. The repository's 97,036 GitHub stars apply to that whole collection, not to this skill on its own.
Related skills
More Security →You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.
Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a target). Prefers direct-CDP live-DOM auditing; falls back to a browser-MCP composition or HTML-string audits.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.
Audit local AI coding-agent sessions with agenttrace for cost, tool failures, latency, anomalies, health, diffs, and CI gates.