ponytail-audit SKILL.md skillA
ponytail-audit from wenaixi/dsh-ponytail is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add wenaixi/dsh-ponytail/ponytail-audit@git:20260821.09dffcdPins git:20260821.09dffcd in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- wenaixi/dsh-ponytail
- Path
skills/ponytail-audit/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260821.09dffcd, committed Aug 21, 2026
- First version recorded
- Aug 21, 2026
- Size
- 1,635 bytes
- Repository stars
- 26
- License
- MIT
全仓过度设计审计，类似 ponytail-review，但扫描的是整个代码库而非 diff：按可删行数排序，列出能删、能简化、能用标准库/原生替代的地方。触发词：审计代码库 / 审计过度设计 / 这个仓库能删什么 / 找臃肿 / ponytail-audit / /ponytail-audit。一次性报告，不直接改代码。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
ponytail-review 的全仓版，扫描整棵目录树而非 diff，按可删收益从大到小排序。 ## 标签 与 ponytail-review 相同： - `delete:` 死代码、未使用的灵活性、臆想功能。替代：无。 - `stdlib:` 标准库已有的东西被手写了一遍，写出函数名。 - `native:` 依赖或代码在做平台已有的事，写出平台特性名。 - `yagni:` 只有一个实现的抽象、没人改的配置、只有一个调用方的分层。 - `shrink:` 同样逻辑，更少行数，给出更短写法。 ## 猎物 标准库或平台已能覆盖的依赖、只有一个实现的接口、只有一个产品的工厂、只做转发的包装、只导出一个东西的文件、僵死的开关和配置、手写的标准库。 ## 输出 每条发现一行，按可删行数排序：`<标签> <该删什么>。<替代方案>。[路径]`。 结尾汇总 `net: -<N> 行，-<M> 个依赖可删。` 若无可删之处：`已足够精简，直接发版。` ## 边界 范围：只看过度设计和复杂度。正确性 bug、安全漏洞、性能问题明确不在范围内，请走常规评审通道。只列发现，不动手改。一次性报告。 「stop ponytail-audit / 正常模式」可退出。
Read the whole file at its exact version.
How to install
mdr add wenaixi/dsh-ponytail/ponytail-audit@sha256:8e68e9a4ab192500The line at the top of this page pins the label git:20260821.09dffcd, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_uwn4h63ynndhzpo3)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Aug 21, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260821.09dffcd latest | 2026-08-21 | 09dffcd | 1,635 B | A | view · diff |
| git:20260821.f572197 | 2026-08-21 | f572197 | 1,652 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (1635 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
wenaixi/dsh-ponytail · 26 stars · license MIT · pushed 2026-10-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_uwn4h63ynndhzpo3 GET https://markdownregistry.com/api/v1/resolve?ref=wenaixi/dsh-ponytail/ponytail-audit GET https://markdownregistry.com/api/v1/blob/8e68e9a4ab1925003282df50eb1c8de2141966231cab90db2227af8ea16e9086
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from wenaixi/dsh-ponytail
Every file in wenaixi/dsh-ponytail