Bogdan Dragomir
/
Notes

Note from June 19, 2026

Three Claude Code skill libraries: Ponytail, shadcn /improve, SkillSpector

Three skill libraries for Claude Code, each tackling a different angle.

Ponytail

The laziest senior dev lens. Flags reinvented stdlib, unneeded dependencies, speculative abstractions, and dead flexibility, one line per finding. Shortcuts taken get marked in code with a comment naming the upgrade path. Claims 80-94% less code, 42-75% less cost, 3-6x faster.

shadcn /improve

shadcn's own skills repo. The /improve skill audits a codebase by spawning parallel read-only Explore subagents, then hands a plan to a cheaper model to execute. Other skills give Claude project-aware shadcn context: framework, aliases, installed components.

NVIDIA SkillSpector

A security scanner for skills before you install them. Catches vulnerable dependencies, suspicious scripts, prompt injection, tool poisoning, and mismatches between a skill's declared purpose and its actual behavior. NVIDIA found 26.1% of skills have vulnerabilities and 5.2% look malicious.

Links

github.com
github.com
github.com