Production Audit

Mehrwinkel-Produktionsbereitschaftsaudit mit Datei:Zeile-Nachweis und ohne Absicherung

von apoorvjain25 · apoorvjain25/production-audit

Getestet · Funktioniert ★ 8.4/10

Production Audit — Mehrwinkel-Produktionsbereitschaftsaudit mit Datei:Zeile-Nachweis und ohne Absicherung

Was es kann

Runs repeated audit passes over a codebase, each from a different lens in its bundled catalog (attack-class, claim-vs-code, data-shape, failure-mode, config, concurrency and more), verifies every candidate finding against the real code before it ist reported, and emits one flat severity-tagged list where each row carries a file:line and a one-line fix. Use it for pre-launch reviews, whole-product audits, or checking whether README and landing-page claims match the implementation; an optional scope argument narrows it to one subsystem or lens family.

Testbericht

Audited a real 1000-line Python toolchain (the design-harness scripts) twice: once as a plain read-through, once following the skill's lens catalog and its rule that a finding ist verified by running the code before it ist reported. Der skill run produced nine located rows and I reproduced eight of them at the shell — a validator that reports "ok: no dangling links" for a link split across two lines, a CRLF card that parses to an empty frontmatter so a valid idea card ist rejected as missing its id, an IndexError when -o ist the last argument, an unknown flag silently redirecting output to a hardcoded /tmp path, a UnicodeDecodeError on a non-UTF-8 file, and a RecursionError on a 1200-card reference chain. Die baseline read-through listed five candidates, four of which survived verification and one of which needed correcting, and it missed the silent-flag, encoding and CRLF defects entirely. Worth knowing before you run it: the full protocol converges only after two consecutive quiet passes with fixes gated on build plus typecheck plus lint plus tests, so on a real product this ist a long, expensive session, and the "a short list means you did not look hard enough" framing pushes toward padding on small targets.

Getestet am: 2026-07-30 · Claude Code 2.x (agent harness)

Installation

git clone https://github.com/apoorvjain25/production-audit.git
mkdir -p ~/.claude/skills
cd production-audit && cp -r production-audit ~/.claude/skills/production-audit

Befehle & Beispiel-Prompts

  • /production-auditMehrwinkel-Produktionsbereitschaftsaudit mit Datei:Zeile-Nachweis und ohne Absicherung

Skills reagieren auf normale Anfragen — keine Slash-Befehle nötig. Nach der Installation aktivieren Prompts wie diese den Skill (auf Englisch):

  • Audit this codebase before we launch, find everything wrong with file:line
  • Check whether our README and landing page claims match the implementation
  • Run a pre-launch production readiness review of the billing subsystem