Ponder icon

Ponder

Coverage-gated multi-pass code review CLI and skill for coding agents.

quinn-o-donnell/ponder · v1.1.2 · Development & Workflow

by Quinn O'DonnellOwner verifiedScan grade: GoodAwesome AI Plugins

Ponder is a coverage-gated, multi-pass deliberative code review CLI and skill for Codex, Claude Code, and AI coding agents.

InstallSource
Follow0
Trust Score81Security scan86Components2
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Ponder a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • Codex
  • Antigravity CLI
  • Cursor
  • Grok
  • 2 skills

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Interactive, Read, Write
License
MIT

Check before relying on it

About Ponder

Why single-pass review fails:
Most agent code review skills suffer from the Forced Speech problem: they inspect two or three files, fabricate nitpicks to sound helpful, and stop early while leaving half the scope untouched.

How Ponder works:
1. Coverage Gate: Ponder parses git diffs or file globs into discrete review units and blocks completion until 100% of units in scope are graded across 5 quality dimensions (correctness, design, legibility, edge_cases, evolution).
2. Four Deliberative Perspectives: Skeptic, Builder, Dreamer, and Empath argue across passes, retract unverified findings, and must reach convergence (churn <= 0.15) before the audit can finish.
3. Zero API Keys Required: Runs inside your existing coding agent harness with zero external API keys or servers.

Install in seconds:

  • npx @quinnod345/ponder install --all
  • brew install Quinnod345/tap/ponder

What is Ponder?

Ponder is a published development & workflow plugin for AI coding agents that works with Claude Code, Codex, Antigravity CLI, Cursor and Grok, developed by Quinn O'Donnell and distributed through the HOL AI plugin registry. Coverage-gated, multi-pass deliberative review CLI and skill for Codex and Claude Code where four perspectives argue across passes, retract unverified findings, and block stopping until every unit in scope is graded.

Canonical slug
quinn-o-donnell/ponder
Version
v1.1.2 · updated Nov 3, 2026

Registry snapshot

Owner verification
Verified on HOL as @Quinnod345
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
2 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
81

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
90/100
MCP server setup
100/100
Plugin Security
86/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/Quinnod345/ponder
Source commit
fda819ae1c34…
Publisher verified
Yes
Owner verified
@Quinnod345
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
86
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-E8hHuE / cisco-skill-scanner: failedcodex:hol-plugin-scanner-E8hHuE / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

0/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

28/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

0/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

[gemini:.] Gemini Extension

10/10

3 checks

[gemini:.] Security

16/16

6 checks

[gemini:.] Operational Security

0/6

5 checks

[gemini:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumoperational-securityDEPENDENCY_LOCKFILE_MISSINGReported 3 times

package.json is present without a corresponding lockfile or pinned dependency snapshot.

Commit a lockfile or use fully pinned requirements for reproducible dependency resolution.

lowoperational-securityDEPENDABOT_MISSINGReported 3 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the ponder entry from the ponder marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall ponder@ponder.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Hero banner
1 / 2

Hero banner

Full size
Loading reviews

Plugin manifest

{
  "name": "ponder",
  "version": "1.1.2",
  "description": "Convergent deliberation loop for coding agents - multi-pass, coverage-gated, append-only ledger review and planning.",
  "author": {
    "name": "Quinn O'Donnell",
    "email": "[email protected]",
    "url": "https://github.com/Quinnod345"
  },
  "homepage": "https://github.com/Quinnod345/ponder",
  "repository": "https://github.com/Quinnod345/ponder",
  "license": "MIT",
  "keywords": [
    "codex",
    "skills",
    "code-review",
    "audit",
    "deliberation",
    "verification",
    "agents"
  ],
  "skills": "./",
  "interface": {
    "displayName": "Ponder",
    "developerName": "Quinn O'Donnell",
    "shortDescription": "Coverage-gated multi-pass review and planning loop for coding agents.",
    "composerIcon": "./assets/icon.svg",
    "longDescription": "Ponder runs repeated grading passes over a codebase, UI, or plan across four perspectives (Skeptic, Builder, Dreamer, Empath) with an append-only ledger and a coverage gate that refuses to stop until every unit is graded.",
    "category": "Developer Tools",
    "capabilities": [
      "Interactive",
      "Read",
      "Write"
    ],
    "defaultPrompt": [
      "Ponder our codebase and grade every module for reliability and edge cases.",
      "Ponder the UI screens and verify coverage before stopping."
    ],
    "websiteURL": "https://github.com/Quinnod345/ponder",
    "privacyPolicyURL": "https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement",
    "termsOfServiceURL": "https://docs.github.com/en/site-policy/github-terms/github-terms-of-service"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/Quinnod345/ponder
Marketplace path
.claude-plugin/marketplace.json
Source path
plugins/Quinnod345/ponder
Install policy
AVAILABLE

Skills

2 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • ponder

    skill/ponder/SKILL.md

    Convergent multi-pass deliberation and code review ledger that enumerates units, grades every unit against a lens rubric, runs four-perspective deliberation (Skeptic, Builder, Dreamer, Empath), records append-only finding deltas, verifies phantom-unit removals across all historical paths, and enforces 1.00 coverage and zero-churn convergence before stopping. Use when the user says "ponder <anything>" ("ponder the UI", "ponder our error handling", "ponder this PR"), "run a ponder audit", "grade every unit with the ponder ledger", "run four-voice Skeptic/Builder/Dreamer/Empath deliberation", or asks for a coverage-gated multi-pass lens audit across files or screens where stopping early would miss units. Also use to resume or recover a ponder session in flight - "where were we in the ponder", "carry on pondering", or an existing .ponder/ directory - by running ponder status rather than starting over.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ponder

    skills/ponder/SKILL.md

    Convergent multi-pass deliberation and code review ledger that enumerates units, grades every unit against a lens rubric, runs four-perspective deliberation (Skeptic, Builder, Dreamer, Empath), records append-only finding deltas, verifies phantom-unit removals across all historical paths, and enforces 1.00 coverage and zero-churn convergence before stopping. Use when the user says "ponder <anything>" ("ponder the UI", "ponder our error handling", "ponder this PR"), "run a ponder audit", "grade every unit with the ponder ledger", "run four-voice Skeptic/Builder/Dreamer/Empath deliberation", or asks for a coverage-gated multi-pass lens audit across files or screens where stopping early would miss units. Also use to resume or recover a ponder session in flight - "where were we in the ponder", "carry on pondering", or an existing .ponder/ directory - by running ponder status rather than starting over.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

1,202 bytes

239d1e81b58c078d…

.claude-plugin/plugin.json

file

598 bytes

aeb3272417e3aaf8…

.codex-plugin/plugin.json

plugin-manifest

1,508 bytes

31e6c516a686bb57…

.cursor-plugin/plugin.json

file

680 bytes

41056230135adcf1…

.grok-plugin/plugin.json

file

546 bytes

efabaa1c1130318e…

assets/icon.svg

asset

1,382 bytes

2ac03f88cce36266…

gemini-extension.json

file

229 bytes

9b9fbb45caf408f5…

hooks/hooks.json

file

265 bytes

7e14ba21f09d69b2…

hooks/register.mjs

file

4,592 bytes

4c08f3b2f5a1c277…

LICENSE

file

1,432 bytes

37c3f51999be2764…

package.json

file

1,213 bytes

256af32b0bf6a6c8…

README.md

file

65,500 bytes

5908cd27a7b7cf83…

SECURITY.md

file

2,072 bytes

bac91ee67439a7c7…

skill/ponder/references/harness-notes.md

file

15,334 bytes

eb230b39ab24d7d1…

skill/ponder/references/perspectives.md

file

23,722 bytes

ce210f6aae69fd76…

skill/ponder/references/protocol.md

file

52,454 bytes

8f8126c91ad2d905…

skill/ponder/references/worked-example.md

file

6,743 bytes

7ed968d4e596972d…

skill/ponder/SKILL.md

skill

11,589 bytes

c7d1988b0ffc3253…

skills/ponder/references/harness-notes.md

skill

15,334 bytes

eb230b39ab24d7d1…

skills/ponder/references/perspectives.md

skill

23,722 bytes

ce210f6aae69fd76…

skills/ponder/references/protocol.md

skill

52,454 bytes

8f8126c91ad2d905…

skills/ponder/references/worked-example.md

skill

6,743 bytes

7ed968d4e596972d…

skills/ponder/SKILL.md

skill

11,589 bytes

c7d1988b0ffc3253…

Ponder — Frequently asked questions

What is Ponder?
Ponder is an AI plugin in the HOL registry. Ponder is a coverage-gated, multi-pass deliberative code review CLI and skill for Codex, Claude Code, and AI coding agents. Why single-pass review fails: Most agent code review skills suffer from the Forced Speech problem: they inspect two or three files, fabricate nitpicks…
How do I install Ponder?
Install Ponder in your harness: Codex — codex plugin marketplace add Quinnod345/ponder; Claude Code — /plugin marketplace add Quinnod345/ponder; Cursor — npx [email protected] add Quinnod345/ponder. Full step-by-step guidance is on the HOL plugin page.
How do I install Ponder in HOL Guard?
To install Ponder in HOL Guard, start with hol-guard plugin install quinn-o-donnell/ponder --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install Ponder in Codex?
To install Ponder in Codex, start with codex plugin marketplace add Quinnod345/ponder. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install Ponder in Claude Code?
To install Ponder in Claude Code, start with /plugin marketplace add Quinnod345/ponder. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
Is Ponder free?
Ponder is listed as free on HOL.
How is the Trust Score for Ponder computed?
Ponder has a HOL Trust Score of 81 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/quinn-o-donnell%2Fponder/trust
Who publishes Ponder?
Ponder is published by Quinn O'Donnell and listed on HOL.
Is Ponder available now?
Ponder is currently available according to its latest public launch.

Directory acceptance

Listed in 1 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-11-03 to 2026-11-04.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Ponder.

Alternatives in Development & Workflow

See all Development & Workflow plugins

History, reviews, and similar plugins

Latest launch