ponytail-review: a Claude Code skill by dietrichgebert
For developers who want a plain-English review of a change that ends in a ship or fix verdict. Skip it if you want the fixes applied, since it only reports.
- Score
- 75of 100
- Rank
- #118of 239
- Installs
- 68.8Kon skills.sh
- Security
- Clear 3 scanners
- Updated
- 2026
- Context
- ~96tokens always
Install
npx skills add https://github.com/dietrichgebert/ponytail --skill ponytail-review
Run it in your terminal. View the source
Using the Claude app rather than Claude Code? You can add a skill there too. How to add it in the app
What does ponytail-review do?
ponytail-review is a Claude skill that reviews a code change in order of weight: correct, safe, holds under load, tested, quick enough, lean. With nothing named, it takes uncommitted changes or the last commit. It reads callers, tests and the README, and infers expected load from deploy config. Every finding needs a concrete case that breaks. Output opens with what the change does, then numbered findings in Must fix, Should fix and Nice to have groups, each with what the code is, the problem, a small fix and the cost of skipping it. It closes with a verdict, possible line savings and anything it could not check.
When should you use ponytail-review?
Use it when
- You want a review of your last commit or PR
- You suspect a change is over-engineered
- The findings must make sense to non-experts
Skip it when
- You want style or naming nitpicks
- You want the fixes applied automatically
What it needs and what it can touch
What it can do
- Reads project files and git history
- Runs search commands to find callers
From reading its instructions, not from running it.
Why it scores 75
Strongest on upkeep (97 of 100), weakest on adoption (64).
Is ponytail-review safe to install?
Every scanner that checked it passed it. Scanners often miss what other scanners catch, and a skill can change after a scan. Read its source before you install it.
| Scanner | Result | Date |
|---|---|---|
| Gen Agent Trust Hub | Passed | Oct 9, 2026 |
| Socket | Passed | Oct 9, 2026 |
| Snyk | Low risk | Oct 9, 2026 |
Details
- Installs
- 68,839
- Repository stars
- 188,336
- Last repository change
- Tokens always loaded
- about 96
- Tokens when used
- about 1,179
- License
- MIT
- Data confidence
- High
Did it do the job for you?
Alternatives to ponytail-review
All skills for this job-
Get code-review-and-qualitycode-review-and-quality
For developers who want a structured review of a diff or pull request before merging.
-
Get ponytail-audit
ponytail-audit
For developers or founders who want a whole repo audited in plain English and ranked by risk.
-
Get security-reviewsecurity-review
For developers who want a security review of a file or diff that reports only confirmed, exploitable flaws.
-
Get security-auditsecurity-audit
For developers who want a source-based security review, from one question up to a full multi-agent audit.
ponytail-review