Description
ponytail-audit is an agent skill from the dietrichgebert ponytail collection, listed on skills.sh. It runs a quality audit of a whole repository, or of the folder or package a person names, looking for bugs, security holes, what would break under real load, risky code without tests, slow paths, and what to delete, merge or split. It works like a senior developer who has just inherited the code and will be paged when it fails. The order of importance is correct, safe, holds under load, tested, fast and lean. The audit first maps the repository: the README, deploy and build configuration, the dependency list, entry points and tests. It judges scale against the expected load and states which load it assumed. It then traces the main flows from input through storage to output, reading closely the paths that handle user input, money, authentication, data writes and background jobs. In a large repository it goes deep where a mistake costs most, and it says which parts it did not read. The report is given in full. A skill is a SKILL.md file of instructions that an AI agent loads when a task calls for it. It is free and open source, and the skills.sh listing shows all three security audits passing.…
Highlights
- Whole-repo quality audit
- Bugs, security and load problems
- Delete, merge or split recommendations
- States the load it assumed
Ratings & Reviews
No ratings yet
Be the first to rate ponytail-audit.
People also visit
constraint-driven-development
Establishes a project's quality bar as a written contract
intended-vs-implemented
The method for finding the gap between what a system is supposed to do
webapp-testing
Test local web applications using Playwright for UI verification and debugging
content-research-writer
Assists in writing high-quality content by conducting research
ponytail-audit FAQ
What does the ponytail-audit skill do?
It audits a repository, folder or package for bugs, security problems, load risks, untested code, slow paths and code to remove or restructure.
What is the order of importance?
Correct, safe, holds under load, tested, fast, then lean.
Does it say what it skipped?
Yes. In a large repo, the audit says which parts it did not read.
How do I install it?
Run: npx skills add https://github.com/dietrichgebert/ponytail --skill ponytail-audit
Is it free?
Yes. It is free and open source.
Are there security findings?
The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.
What are the best ponytail-audit alternatives?
Popular alternatives to ponytail-audit include agent-self-evaluation, ponytail-review and constraint-driven-development. See all ponytail-audit alternatives