Ponytail SQL Objects — Security skill for Claude Code
This skill makes Claude write SQL Server objects the way this project requires — the audit columns, the soft delete, the naming, the header blocks, the descriptions — without you having to restate the.
How to install Ponytail SQL Objects
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open roscoesincero-MDE/ponytail-sql-objects and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Ponytail SQL Objects does
This skill makes Claude write SQL Server objects the way this project requires — the audit columns, the soft delete, the naming, the header blocks, the descriptions — without you having to restate the rules each time. It also installs and checks the change logging that records who altered which database object.
Alternatives in Security
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
- Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
README
How to use this skill
This skill makes Claude write SQL Server objects the way this project requires — the audit columns, the soft delete, the naming, the header blocks, the descriptions — without you having to restate the rules each time. It also installs and checks the change logging that records who altered which database object.
You do not run this skill. You just ask for what you want, and it applies.
1. Install it (once)
The folder must be named after the skill, and it goes in one of two places.
**For this project only:**
\.claude\skills\ponytail-sql-objects\
**For every project on this machine:**
C:\Users\\.claude\skills\ponytail-sql-objects\
Copy this whole folder there and rename the copy to `ponytail-sql-objects` — `SKILL.md`, `templates\`, `scripts\` and `references\` must all sit inside it. Then restart Claude Code. Type `/skills` to confirm `ponytail-sql-objects` is listed.
That is the entire installation. Nothing to configure, no dependencies.
2. Use it (just ask)
Ask in plain language. The skill loads by itself when the request touches SQL objects.
| Say something like | You get |
|---|---|
"Add a Permit table to dbo" |
A guarded CREATE TABLE with all 7 audit columns, DF_dbo_Permit_* constraint names, a filtered unique index, an AFTER UPDATE trigger that maintains the audit columns, and a description on the table and every column |
"Add a PermitStatus column to dbo.Permit" |
A separate guarded ALTER TABLE ... ADD block — it will not edit the original CREATE TABLE |
"Write a view over dbo.Permit" |
A CREATE OR ALTER VIEW with the header block and WHERE IsDeleted = 0 |
| "Write a procedure that merges the permit batch" | A procedure with the header block, TRY/CATCH, the logs.ExecutionLog instrumentation, and a bare ;THROW; |
| "Does this database record its schema changes?" | The read-only check script, and what to do about anything missing |
| "Set u |
Related Skills
Pbi Audit Fix
Autonomous audit-then-fix pipeline — scan the TMDL/TMSL model, auto-fix WARN-level issues (missing description
Arbitus
Open-source security gateway for MCP tool calls — blocks secret leaks, enforces agent policies, and requires h
Pbi Audit
Run a comprehensive 21-rule health check across 8 domains: relationships, naming, date table, measure quality,
Prompt Craft
Write or audit Claude Code SKILL.md files, CLAUDE.md instructions, and agent prompt templates — CC-specific pa
Rule Autopsy
Audits a CLAUDE.md or rules folder and reports how many blocks claim an effect without a reproducible receipt,
Resilience Audit
Reliability / failure-mode audit — why distributed and async systems fall over: single points of failure, miss
Related Agents
Ponytail Review
Cold over-engineering reviewer. Spawned by parallel workflows when non-test source changes, to find what to de
Cleanup Phase 1
Runs phase 1 (dead code) and phase 1.5 (duplicate functions) of a codebase cleanup that is already under way.
Page Object Mapper
Maps UFT objects to existing Aurora Page Object elements or proposes new ones, applying naming conventions and