ponytail
Skill3 starsChanged 10 days agoMITView on GitHub
Activate this skill for minimal engineering, code simplification, refactoring to reduce complexity, eliminating unnecessary abstractions, wrappers, or dead dependencies, and enforcing the "lazy senior developer" philosophy (YAGNI, standard library and native platform preference).
We split this skill into the rules it gives an agent
15 rules. 0 are common, 9 are distinctive, and 6 are very specific to this project.
0
Common
Most of the 130 edited versions we read keep these.
9
Distinctive
This author's own choices. Worth a look.
6
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 35
Before writing any new code, evaluate solutions in this strict order:
- Distinctive: line 57
No wrapper components without clear value: Avoid creating single-use wrappers around standard components or libraries.
- Distinctive: line 58
No multi-layered architectures for simple tasks: Avoid creating a repository, service, interface, DTO, and controller for a simple 10-line …
- Distinctive: line 59
Flatten unnecessary indirection: If a helper function is only called once and adds no semantic clarity, inline it.
- Distinctive: line 60
Avoid speculative configuration: Do not add dynamic config switches, feature flags, or factory patterns for variations that do not …
- Very specific: line 63
Frontend: Prefer HTML5 semantic elements (<dialog>, <details>, <input type="date">), CSS Grid/Flexbox, native CSS variables, and modern Web …
- Very specific: line 64
Node.js: Prefer built-in node:fs/promises, node:path, node:crypto, node:test, fetch over external packages like lodash, rimraf, uuid, axios …
- Very specific: line 65
Python: Prefer pathlib, dataclasses, functools, typing, json, sqlite3 over redundant external packages.
- Distinctive: line 69
If the project already uses a specific validation library (e.g., Zod), do not introduce a second one (e.g., Joi or Yup).
- Distinctive: line 74
Retain full input validation and sanitization: Never bypass security controls to reduce lines of code.
- Distinctive: line 77
Preserve accessibility (a11y): Never remove ARIA attributes, semantic tags, or focus outlines.
- Very specific: line 86
Ponytail approach: Use native Intl.DateTimeFormat or standard library methods.
- Very specific: line 90
Ponytail approach: Use native structuredClone() (standard in modern browsers and Node.js 17+).
- Very specific: line 94
Ponytail approach: Use standard HTML5 <dialog> element with .showModal() and native CSS backdrop styling.
- Distinctive: line 100
When you make an intentional design trade-off (e.g., inlining code or choosing stdlib over a library), leave a brief 1-line code comment or …
“Common” is measured: kept by at least 6 in 10 of the 130 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Ponytail — Minimal Engineering Skill
Official upstream: DietrichGebert/ponytail (MIT License)
Philosophy & Core Objective
The best code is the code you never wrote. Every line of added code is a liability to be read, tested, debugged, and maintained.
The goal of Ponytail is to enforce disciplined minimalism: eliminate premature abstractions, avoid speculative complexity, reject unnecessary third-party dependencies, and prefer native platform capabilities.
When to Activate
- Refactoring code to simplify architecture and eliminate bloat.
- Reviewing PRs or proposed designs for over-engineering.
- Implementing features where minimal footprint and maximum maintainability are priorities.
- Evaluating whether to add a new third-party dependency versus using existing libraries or native APIs.
- Removing dead code, redundant wrappers, and speculative configuration layers.
The Decision Ladder
Before writing any new code, evaluate solutions in this strict order:
1. YAGNI (Does this problem need code at all?)
└── If no: Stop. Do not build it.
2. Standard Library (Can Python / Node.js / Go / Rust stdlib solve it?)
└── If yes: Use stdlib. Add zero dependencies.
3. Native Platform Feature (HTML5, modern CSS, Web APIs, shell builtins)
└── If yes: Use the platform primitive directly.
4. Already-Installed Dependency (Can existing packages in package.json/pyproject.toml do it?)
└── If yes: Reuse the established tool.
5. In-Place Idiomatic Code (Can it be solved in 5-15 readable lines?)
└── If yes: Implement directly without creating a new class/module.
6. Minimum Viable Code (Write only what satisfies the acceptance criteria)
└── Implement cleanly with no speculative generality.Implementation Rules
1. Reject Premature Abstractions
- No wrapper components without clear value: Avoid creating single-use wrappers around standard components or libraries.
- No multi-layered architectures for simple tasks: Avoid creating a repository, service, interface, DTO, and controller for a simple 10-line database query.
- Flatten unnecessary indirection: If a helper function is only called once and adds no semantic clarity, inline it.
- Avoid speculative configuration: Do not add dynamic config switches, feature flags, or factory patterns for variations that do not currently exist.
2. Native-First Choices
- Frontend: Prefer HTML5 semantic elements (
<dialog>,<details>,<input type="date">), CSS Grid/Flexbox, native CSS variables, and modern Web APIs (fetch,Intl,URLSearchParams) over heavy utility packages. - Node.js: Prefer built-in
node:fs/promises,node:path,node:crypto,node:test,fetchover external packages likelodash,rimraf,uuid,axiosunless project requirements dictate otherwise. - Python: Prefer
pathlib,dataclasses,functools,typing,json,sqlite3over redundant external packages.
3. Reuse Established Project Patterns
- Inspect existing codebase conventions first.
- If the project already uses a specific validation library (e.g., Zod), do not introduce a second one (e.g., Joi or Yup).
- Match the established project architecture rather than inventing a competing paradigm.
4. Non-Negotiable Safeguards
Minimal code does not mean cutting corners on safety:
- Retain full input validation and sanitization: Never bypass security controls to reduce lines of code.
- Retain necessary error handling: Handle known error modes gracefully.
- Preserve type safety and tests: Maintain complete type annotations and unit test coverage.
- Preserve accessibility (a11y): Never remove ARIA attributes, semantic tags, or focus outlines.
- Do not write unreadable one-liners: Clean, readable code over clever, unmaintainable code golf.
Practical Examples
Example 1: Date & Time Manipulation
- Over-engineered: Installing
moment.js(large legacy bundle) just to format a date string. - Ponytail approach: Use native
Intl.DateTimeFormator standard library methods.
Example 2: Deep Clone
- Over-engineered: Importing
lodash.clonedeepfor JSON-serializable state cloning. - Ponytail approach: Use native
structuredClone()(standard in modern browsers and Node.js 17+).
Example 3: Modal Dialog
- Over-engineered: Pulling in a 20KB third-party modal library with 10 props and portal wrappers.
- Ponytail approach: Use standard HTML5
<dialog>element with.showModal()and native CSS backdrop styling.
Architectural Rationale
When you make an intentional design trade-off (e.g., inlining code or choosing stdlib over a library), leave a brief 1-line code comment or report summary so future developers understand the reasoning.
Other versions134 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 134
- DietrichGebert/ponytail★ 182ksame name
- diegosouzapw/OmniRoute★ 83ksame name
- cheaper-inference/OmniRoute★ 83ksame name
- kortix-ai/suna★ 20ksame name
- jeffvli/feishin★ 10ksame name
- pollinations/pollinations★ 5.3ksame name
- graphif/project-graph★ 4.5ksame name
- TanStack/ai★ 3.3ksame name
- marmelab/atomic-crm★ 1.4ksame name
- shobcoder/shob★ 575same name
124 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
Used alongsideProjects with it also use herdr-cli, caveman-explore and 10 more.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
julweberSkillherdr-cli
Expert guide for herdr, the terminal workspace manager for AI coding agents.
Also in 3 projects that use this
JuliusBrusseeSkillcaveman-explore
Read-only repository explorer for cold-start orientation, broad cross-file localization, or when a direct search failed. Skip it when the exact file or symbol is already named. Returns path:line citations only; its reads stay out of main context.
Also in 5 projects that use this
codexceedSkillmintlify-api
Interact with the Mintlify REST API to manage deployments, trigger builds, and query documentation site metadata programmatically.
Also in 3 projects that use this
usestrixSkillci-security-scanning-with-strix
Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or automated security review to their CI pipeline, pre-merge gate, or PR workflow.
Also in 3 projects that use this
usestrixSkillfix-security-vulnerabilities-with-strix
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strix_runs report, vulnerabilities.json, findings.sarif, or a cloud scan.
Also in 3 projects that use this
JuliusBrusseeSkillcaveman-optimize
Turn a Caveman optimization observation into an operator-chosen candidate with a paired baseline evaluation. Use when asked to inspect or evaluate a Caveman optimization report. Needs explicit approval.
Also in 3 projects that use this
- +1 more from usestrix
- +3 more from JuliusBrussee
In this repository50 other files it gives its agents.
- AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- .cursor/rules/always-on.mdcCursor rule
- 3d-visualsSkill
- agent-researchSkill
- api-architectureSkill
- assets-mediaSkill
- cavemanSkill
- cloudflare-expertSkill
- devops-cicdSkill
- firebase-expertSkill
- git-collaborationSkill
- gravitasSkill
- gsd-coreSkill
- llm-optimizationSkill
- mobile-engineeringSkill
- postgres-ecosystemSkill
- security-auditorSkill
- sentry-expertSkill
- seo-marketingSkill
- state-managementSkill
- testing-qaSkill
- ui-ux-pro-maxSkill
- ux-researchSkill
- web-animationSkill
- web-gamedevSkill
- 3d-visualsSkill
- agent-researchSkill
- api-architectureSkill
- assets-mediaSkill
- cavemanSkill
- cloudflare-expertSkill
- devops-cicdSkill
- firebase-expertSkill
- git-collaborationSkill
- gravitasSkill
- gsd-coreSkill
- llm-optimizationSkill
- mobile-engineeringSkill
- ponytailSkill
- postgres-ecosystemSkill
- security-auditorSkill
- sentry-expertSkill
- seo-marketingSkill
- state-managementSkill
- testing-qaSkill
- ui-ux-pro-maxSkill
- ux-researchSkill
- web-animationSkill
- web-gamedevSkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

