Overview
ponytail-audit is an open-source security skill for Claude Code and compatible agents, published by DietrichGebert. Its author describes it as: “Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user say…”. The project has 143k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add DietrichGebert/ponytail`.
What ponytail-audit does
ponytail-review, repo-wide. Scan the whole tree instead of a diff. Rank findings biggest cut first.
What’s inside
The SKILL.md for ponytail-audit is organised into these sections:
- Tags
- Hunt
- Output
- Boundaries
Installation
Add ponytail-audit to your agent with:
/plugin marketplace add DietrichGebert/ponytailReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — ships a claude code plugin marketplace
License
ponytail-audit is published under the MIT license.
Strengths
- Clear MIT license — safe to read and adapt within its terms
- Ships in DietrichGebert/ponytail, an established project with 143,477 GitHub stars
- Works with Claude Code
- Actively maintained — repository updated in the last 30 days
- Its repository gained 50,797 GitHub stars over the last 52 days
Author
Topics
Frequently asked questions
- What does ponytail-audit do?
- Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit this codebase", "audit for over-engineering", "what can I delete from this repo", "find bloat", "ponytail-audit", or "/ponytail-audit". One-shot report, does not apply fixes.
- How do I install ponytail-audit?
- Run /plugin marketplace add DietrichGebert/ponytail in your agent, then reload your skills. Review the source at https://github.com/DietrichGebert/ponytail before installing.
- Is ponytail-audit free to use?
- Yes. ponytail-audit is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Which agents does ponytail-audit work with?
- ponytail-audit lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does ponytail-audit come from?
- ponytail-audit ships inside DietrichGebert/ponytail, a repository that contains 6 catalogued skills in total. The repository's 143,477 GitHub stars apply to that whole collection, not to this skill on its own.
