Skills DirectoryCurated open-source Skills from GitHub
English

ponytail-auditcommit 2a1fe84SKILL.md · Security Audit

Ponytail Repo Audit

One-shot quality audit of a whole repo for bugs, security holes, load problems, untested risky code, slow paths and code to delete, merge or split.

npx skills add DietrichGebert/ponytail --skill ponytail-audit
Permissions
  • read-repo
  • write-files
  • shell
  • network
Compatible with
Claude Code, Codex, Cursor
GitHub
181.7k
Source
Community · DietrichGebert
Status
Scan passed
License
MIT
Category
Security Audit
Repository
github.com/DietrichGebert/ponytail/skills/ponytail-audit

Core rule

Every finding needs a concrete case showing the wrong result it causes; no case, no finding.

Execution Phases

  1. Phase 01Map first

    Read the README, deploy and build config, dependencies, entry points and tests, find the expected load, and trace the main flows end to end.

  2. Phase 02Look for problems

    Check for bugs, security and data-loss risks, scale problems, missing tests, speed, and code to delete, merge or split.

  3. Phase 03Check before reporting

    Before calling code unused, search the whole tree including tests and config; propose only the smallest fix and prefer deletions.

  4. Phase 04Report ranked findings

    State what the repo does and the assumed load, list up to 20 numbered findings by must, should and nice to fix, and name what was not checked.

Permissions (summarised from SKILL.md)

CapabilityNeededDetails
File writesNot requiredA one-shot report that changes no code.
Command executionNot requiredNo command execution is described; it only reads and searches code.
Network outboundNot requiredThe instructions include no network access.

SKILL.md frontmatter (YAML)

SKILL.md frontmatter (YAML)commit 2a1fe84
---
name: ponytail-audit
description: >
  Quality audit of a whole repo: bugs, security holes, what breaks under real
  load, risky code without tests, slow paths, and what to delete, merge or
  split. Ranked, each finding explained in plain English. One-shot report,
  changes nothing. Use for "audit this codebase", "review the whole repo",
  "find bloat", "what can I delete", /ponytail-audit.
---

Related skills

A rule scan cannot catch every risk. Read this skill's SKILL.md and check its permissions before installing.
Markdown version GitHub