ponytail-audit: a Claude Code skill by dietrichgebert
For developers or founders who want a whole repo audited in plain English and ranked by risk. Skip it if you want code changed or one diff reviewed.
- Score
- 74of 100
- Rank
- #129of 239
- Installs
- 56.6Kon skills.sh
- Security
- Clear 3 scanners
- Updated
- 2026
- Context
- ~90tokens always
Install
npx skills add https://github.com/dietrichgebert/ponytail --skill ponytail-audit
Run it in your terminal. View the source
Using the Claude app rather than Claude Code? You can add a skill there too. How to add it in the app
What does ponytail-audit do?
ponytail-audit is a Claude skill that audits a whole repository, or a folder you name, and writes one report without changing any code. Claude first maps the project: README, build and deploy config, dependencies, entry points and tests, and states the load it assumes. It traces the main data flows and looks for bugs, security holes, data loss, problems at scale, risky code with no test, slow paths, and code to delete, merge or split. Each finding needs a concrete failing case. The report opens with what the repo does, then up to 20 numbered findings under Must fix, Should fix and Nice to have, each with a fix.
When should you use ponytail-audit?
Use it when
- You inherited a codebase and want its risks listed
- You want to know which code to delete
- You need a plain-English health check before launch
Skip it when
- You want fixes applied, not a report
- You only need one pull request reviewed
What it needs and what it can touch
What it can do
- Reads project files
- Searches the codebase
From reading its instructions, not from running it.
Why it scores 74
Strongest on upkeep (97 of 100), weakest on adoption (62).
Is ponytail-audit safe to install?
Every scanner that checked it passed it. Scanners often miss what other scanners catch, and a skill can change after a scan. Read its source before you install it.
| Scanner | Result | Date |
|---|---|---|
| Gen Agent Trust Hub | Passed | Oct 9, 2026 |
| Socket | Passed | Oct 9, 2026 |
| Snyk | Low risk | Oct 9, 2026 |
Details
- Installs
- 56,564
- Repository stars
- 188,336
- Last repository change
- Tokens always loaded
- about 90
- Tokens when used
- about 1,253
- License
- MIT
- Data confidence
- High
Did it do the job for you?
Alternatives to ponytail-audit
All skills for this job-
Get ponytail-review
ponytail-review
For developers who want a plain-English review of a change that ends in a ship or fix verdict.
-
Get security-auditsecurity-audit
For developers who want a source-based security review, from one question up to a full multi-agent audit.
-
Get code-review-and-qualitycode-review-and-quality
For developers who want a structured review of a diff or pull request before merging.
-
Get Understand AnythingUnderstand Anything
For developers joining or auditing a large codebase who want an explorable map of it.
ponytail-audit