# Ponytail Audit > Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit this codebase", "audit for over-engineering", "what can I delete from this repo", "find bloat", "ponytail-audit", or "/ponytail-audit". One-shot report, does not apply fixes. - Skill: `om-scogo/ponytail-audit` (Agent Skill, multi-file: 4 files) - Install (CLI): `npx skillmds add om-scogo/ponytail-audit` - Raw SKILL.md: https://api.skillmd.com/api/skills/om-scogo/ponytail-audit/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Security - Author: om-scogo (https://skillmd.com/u/om-scogo) - Updated: 2026-09-08 - Page: https://skillmd.com/skills/om-scogo/ponytail-audit --- ponytail-review, repo-wide. Scan the whole tree instead of a diff. Rank findings biggest cut first. ## Tags Same as ponytail-review: - `delete:` dead code, unused flexibility, speculative feature. Replacement: nothing. - `stdlib:` hand-rolled thing the standard library ships. Name the function. - `native:` dependency or code doing what the platform already does. Name the feature. - `yagni:` abstraction with one implementation, config nobody sets, layer with one caller. - `shrink:` same logic, fewer lines. Show the shorter form. ## Hunt Deps the stdlib or platform already ships, single-implementation interfaces, factories with one product, wrappers that only delegate, files exporting one thing, dead flags and config, hand-rolled stdlib. ## Output One line per finding, ranked: ` . . [path]`. End with `net: - lines, - deps possible.` Nothing to cut: `Lean already. Ship.` ## Boundaries Scope: over-engineering and complexity only. Correctness bugs, security holes, and performance are explicitly out of scope. Route them to a normal review pass. Lists findings, applies nothing. One-shot. "stop ponytail-audit" or "normal mode" to revert.