Compétences ponytail-debt
📦

ponytail-debt

Révision du contenu r1 Sûr ⚙️ Commandes externes

Collect Ponytail Comments into a Technical Debt Ledger

Deferred work becomes difficult to track when its limits and upgrade triggers remain scattered across code comments. This skill collects marked comments into a ledger and flags missing triggers.

Prend en charge: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 77 Bronze

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent
Review the Skillstore skill "ponytail-debt" from https://skillstore.io/skills/dietrichgebert-ponytail-debt.md and its manifest at https://skillstore.io/api/skills/dietrichgebert-ponytail-debt/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/dietrichgebert-ponytail-debt.md manifest signé GET /api/skills/dietrichgebert-ponytail-debt/manifest lockfile signé GET /api/skills/dietrichgebert-ponytail-debt/lockfile

Tester

Utilisation de « ponytail-debt ». Illustrative comment: a simplified cache supports 100 entries and should be upgraded when that limit is exceeded.

RĂ©sultat attendu:

  • Simplified cache. Ceiling: 100 entries. Upgrade: when the limit is exceeded.
  • 1 marker, 0 with no trigger.

Utilisation de « ponytail-debt ». Illustrative comment: a simplified queue supports one worker but names no upgrade path.

RĂ©sultat attendu:

  • Simplified queue. Ceiling: one worker. Upgrade: not specified. Tag: no-trigger.
  • 1 marker, 1 with no trigger.

Utilisation de « ponytail-debt ». The repository search finds no matching ponytail: comments.

RĂ©sultat attendu:

No ponytail: debt. Clean ledger.

Audit de sécurité

Sûr
v1 • 30/09/2026 Ouvrir le rapport versionné

All 13 static findings are false positives: Markdown formatting, read-only repository commands, and ordinary activation phrases. No evidence found of prompt injection, credential access, exfiltration, or destructive operations. The skill reports repository comments and permits saving only when requested.

1
Fichiers analysés
45
Lignes analysées
0
Éléments à examiner
0
Faux positifs ignorés

Facteurs de risque

⚙️ Commandes externes (11)
SKILL.md:4 SKILL.md:11 SKILL.md:17 SKILL.md:20 SKILL.md:29 SKILL.md:31 SKILL.md:33 SKILL.md:35 SKILL.md:36 SKILL.md:38 SKILL.md:43
Le dernier audit statique et sémantique terminé n’a détecté aucun constat de sécurité confirmé. Cela ne prouve pas que le skill est sans effets secondaires.
Audité par: codex
Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné
Évaluation de sécurité

Copier le lien du rapport

https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/dietrichgebert-ponytail-debt/security.svg)](https://skillstore.io/skills/dietrichgebert-ponytail-debt?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/dietrichgebert-ponytail-debt?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dietrichgebert-ponytail-debt/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/dietrichgebert-ponytail-debt.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citations académiques (APA · BibTeX · CFF)

Citation APA

dietrichgebert. (2026). ponytail-debt security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1

Citation BibTeX

@techreport{dietrichgebert-dietrichgebert-ponytail-debt-2026, author = {dietrichgebert}, title = {ponytail-debt security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "ponytail-debt security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "dietrichgebert" date-released: "2026-09-30" url: "https://skillstore.io/skills/dietrichgebert-ponytail-debt/audits/1" identifiers: - type: other value: "skillstore:dietrichgebert-ponytail-debt:audit:1" description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen
55
Architecture
85
Maintenabilité
87
Contenu
65
Communauté
83
Conformité aux spécifications

Ce que vous pouvez créer

Review deferred implementation work

Collect marked shortcuts with their limits and upgrade triggers before planning maintenance.

Identify incomplete debt records

Review markers without upgrade triggers and discuss missing criteria with the team.

Prepare a maintenance handover

Produce a grouped ledger and optionally add Git blame attribution for follow-up discussions.

Essayez ces prompts

List marked technical debt 
Run ponytail-debt on this repository. Report the ledger without changing files.
Review missing triggers 
Collect ponytail: comments by file. Include stated limits, flag missing upgrade triggers, and report totals. Do not invent missing details.
Add attribution 
Generate a ponytail debt ledger with Git blame attribution. Skip dependencies, Git metadata, and build output. Leave repository files unchanged.
Adapt and save the report 
Adapt the marker search to this repository's comment syntax and build directories. Include attribution and missing-trigger counts. Save the ledger to PONYTAIL-DEBT.md.

Bonnes pratiques

  • Record a concrete limit and upgrade trigger in every ponytail: comment.
  • Confirm search exclusions and comment prefixes match the repository before relying on totals.
  • Review reported locations and request saving explicitly when a persistent ledger is needed.

Éviter

  • Treating an empty ledger as proof that the repository contains no technical debt.
  • Inventing limits, upgrade triggers, or current ownership when comments and history do not establish them.
  • Assuming the report fixes code, creates tickets, or updates automatically.

Foire aux questions

Which comments does this skill collect?
It collects ponytail: markers in code comments. The example search covers hash and double-slash prefixes; other comment styles require adaptation.
Does it change repository files?
No files change by default. Saving a ledger requires an explicit request.
What does each ledger row contain?
Each row includes a file location, the simplification, its stated limit, and its upgrade trigger. Rows are grouped by file.
How are missing upgrade triggers handled?
Comments without an upgrade path or trigger receive a no-trigger tag. The final summary counts these markers.
Can it identify an owner?
Optional Git blame attribution can identify the associated commit author. This does not establish current ownership.
What does a clean ledger mean?
No matching ponytail: comments were found within the search scope. Unmarked technical debt may still exist.

Détails du développeur

Licence

MIT

RĂ©vision Skillstore

r1

Avis de version

L’auteur n’a déclaré aucune version.

DĂ©pĂ´t

https://github.com/dietrichgebert/ponytail/tree/e3ba2aa6f1e6f0bc4d69eb09c9f0d0a93af56156/skills/ponytail-debt

RĂ©f

0fb691702e7718cedceac0e8b234dbaf6cb19321

RĂ©cence de maintenance

30/09/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

đź“„ SKILL.md