📦

ponytail-debt

Name: ponytail-debt
Author: dietrichgebert

Inhaltsrevision r1 Sicher ⚙️ Externe Befehle

Collect Ponytail Comments into a Technical Debt Ledger

Deferred work becomes difficult to track when its limits and upgrade triggers remain scattered across code comments. This skill collects marked comments into a ledger and flags missing triggers.

Unterstützt: Claude Codex Code(CC)

🥉 77 Bronze

Maintain this Skill? Claim it 🥉 77 Bronze

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "ponytail-debt" from https://skillstore.io/skills/dietrichgebert-ponytail-debt.md and its manifest at https://skillstore.io/api/skills/dietrichgebert-ponytail-debt/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/dietrichgebert-ponytail-debt.md Signiertes manifest GET /api/skills/dietrichgebert-ponytail-debt/manifest Signiertes lockfile GET /api/skills/dietrichgebert-ponytail-debt/lockfile

Testen

„ponytail-debt“ wird verwendet. Illustrative comment: a simplified cache supports 100 entries and should be upgraded when that limit is exceeded.

Erwartetes Ergebnis:

Simplified cache. Ceiling: 100 entries. Upgrade: when the limit is exceeded.
1 marker, 0 with no trigger.

„ponytail-debt“ wird verwendet. Illustrative comment: a simplified queue supports one worker but names no upgrade path.

Erwartetes Ergebnis:

Simplified queue. Ceiling: one worker. Upgrade: not specified. Tag: no-trigger.
1 marker, 1 with no trigger.

„ponytail-debt“ wird verwendet. The repository search finds no matching ponytail: comments.

Erwartetes Ergebnis:

No ponytail: debt. Clean ledger.

Sicherheitsaudit

Sicher

v1 • 30.9.2026 Versionsbericht öffnen

All 13 static findings are false positives: Markdown formatting, read-only repository commands, and ordinary activation phrases. No evidence found of prompt injection, credential access, exfiltration, or destructive operations. The skill reports repository comments and permits saving only when requested.

Gescannte Dateien

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Risikofaktoren

⚙️ Externe Befehle (11)

SKILL.md:4 SKILL.md:11 SKILL.md:17 SKILL.md:20 SKILL.md:29 SKILL.md:31 SKILL.md:33 SKILL.md:35 SKILL.md:36 SKILL.md:38 SKILL.md:43

Das letzte abgeschlossene statische und semantische Audit erkannte keine bestätigten Sicherheitsbefunde. Dies beweist nicht, dass der Skill keine Nebenwirkungen hat.

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dietrichgebert-ponytail-debt/security.svg)](https://skillstore.io/skills/dietrichgebert-ponytail-debt?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/dietrichgebert-ponytail-debt?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dietrichgebert-ponytail-debt/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/dietrichgebert-ponytail-debt.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

dietrichgebert. (2026). ponytail-debt security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1

BibTeX-Zitat

@techreport{dietrichgebert-dietrichgebert-ponytail-debt-2026,
  author = {dietrichgebert},
  title = {ponytail-debt security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ponytail-debt security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "dietrichgebert"
date-released: "2026-09-30"
url: "https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1"
identifiers:
  - type: other
    value: "skillstore:dietrichgebert-ponytail-debt:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Review deferred implementation work

Collect marked shortcuts with their limits and upgrade triggers before planning maintenance.

Identify incomplete debt records

Review markers without upgrade triggers and discuss missing criteria with the team.

Prepare a maintenance handover

Produce a grouped ledger and optionally add Git blame attribution for follow-up discussions.

Diese Prompts ausprobieren

List marked technical debt

Run ponytail-debt on this repository. Report the ledger without changing files.

Review missing triggers

Collect ponytail: comments by file. Include stated limits, flag missing upgrade triggers, and report totals. Do not invent missing details.

Add attribution

Generate a ponytail debt ledger with Git blame attribution. Skip dependencies, Git metadata, and build output. Leave repository files unchanged.

Adapt and save the report

Adapt the marker search to this repository's comment syntax and build directories. Include attribution and missing-trigger counts. Save the ledger to PONYTAIL-DEBT.md.

Bewährte Praktiken

Record a concrete limit and upgrade trigger in every ponytail: comment.
Confirm search exclusions and comment prefixes match the repository before relying on totals.
Review reported locations and request saving explicitly when a persistent ledger is needed.

Vermeiden

Treating an empty ledger as proof that the repository contains no technical debt.
Inventing limits, upgrade triggers, or current ownership when comments and history do not establish them.
Assuming the report fixes code, creates tickets, or updates automatically.

Häufig gestellte Fragen

Which comments does this skill collect?

It collects ponytail: markers in code comments. The example search covers hash and double-slash prefixes; other comment styles require adaptation.

Does it change repository files?

No files change by default. Saving a ledger requires an explicit request.

What does each ledger row contain?

Each row includes a file location, the simplification, its stated limit, and its upgrade trigger. Rows are grouped by file.

How are missing upgrade triggers handled?

Comments without an upgrade path or trigger receive a no-trigger tag. The final summary counts these markers.

Can it identify an owner?

Optional Git blame attribution can identify the associated commit author. This does not establish current ownership.

What does a clean ledger mean?

No matching ponytail: comments were found within the search scope. Unmarked technical debt may still exist.

Entwicklerdetails

Autor

dietrichgebert

Lizenz

MIT

Skillstore-Revision

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/dietrichgebert/ponytail/tree/e3ba2aa6f1e6f0bc4d69eb09c9f0d0a93af56156/skills/ponytail-debt

Ref.

0fb691702e7718cedceac0e8b234dbaf6cb19321

Aktualität der Wartung

30.9.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📄 SKILL.md