# ponytail-audit

> Claude/Codex skill by [@dietrichgebert](https://github.com/dietrichgebert) · 167k stars · 46k installs · Updated 2026-10-18

Quality audit of a whole repo: bugs, security holes, what breaks under real load, risky code without tests, slow paths, and what to delete, merge or split. Ranked, each finding explained in plain English. One-shot report, changes nothing. Use for "audit this codebase", "review the whole repo", "find bloat", "what can I delete", /ponytail-audit.

Tags: agent-skills, ai-agents, claude, claude-code, claude-code-plugin, cursor-rules, developer-tools, llm, prompt-engineering, yagni

## Install

```sh
git clone https://github.com/DietrichGebert/ponytail /tmp/ponytail && ln -s /tmp/ponytail/skills/ponytail-audit ~/.claude/skills/ponytail-audit
```

## From README

Map first Audit what the user names: a folder, a package, or the whole repo. Nothing named: the whole repo. Read the README, the deploy and build config, the dependency list, the entry points (main, routes, handlers, jobs, CLI commands) and the tests. Find the expected load: one person running a script, or many users and processes at once. Judge scale against that, and say which load you assumed. Trace the main flows end to end: where data comes in, what is stored, what goes out. Read those paths fully: input from users, money, auth, data writes, background jobs, anything shared between processes. Big repo: go deep where a mistake costs the most, not file by file. Say which parts you did not read. Look for Bug: wrong result, crash, missed edge case (empty, zero, last item, rounding, time zones), callers that disagree with what a function returns, the same rule applied differently in two places.

## Links

- HTML page: https://omgskills.com/skills/dietrichgebert/ponytail/ponytail-audit/
- GitHub: https://github.com/DietrichGebert/ponytail
- Author: [@dietrichgebert](https://github.com/dietrichgebert)

## More from this repo

- [ponytail-review](https://omgskills.com/skills/dietrichgebert/ponytail/ponytail-review/index.md) — Quality review of a change: is the logic right, is it safe, does it hold under real load, is risky code tested, is it...
   - [@dietrichgebert](https://github.com/dietrichgebert) · 167k stars