SkillProof tested Claude skills

Production Audit

Wieloaspektowy audyt gotowości produkcyjnej z dowodami file:line i bez zabezpieczeń

Autor: apoorvjain25 · apoorvjain25/production-audit

Testowano · Działa ★ 8.4/10

Production Audit — Wieloaspektowy audyt gotowości produkcyjnej z dowodami file:line i bez zabezpieczeń

Co robi ten skill

Runs repeated audit passes over a codebase, each from a different lens in its bundled catalog (attack-class, claim-vs-code, data-shape, failure-mode, config, concurrency and more), verifies every candidate finding against the real code before it is reported, and emits one flat severity-tagged list where each row carries a file:line and a one-line fix. Use it for pre-launch reviews, whole-product audits, or checking whether README and landing-page claims match the implementation; an optional scope argument narrows it to one subsystem or lens family.

Raport z testu

Audited a real 1000-line Python toolchain (the design-harness scripts) twice: once as a plain read-through, once following the skill's lens catalog and its rule that a finding is verified by running the code before it is reported. The skill run produced nine located rows and I reproduced eight of them at the shell — a validator that reports "ok: no dangling links" for a link split across two lines, a CRLF card that parses to an empty frontmatter so a valid idea card is rejected as missing its id, an IndexError when -o is the last argument, an unknown flag silently redirecting output to a hardcoded /tmp path, a UnicodeDecodeError on a non-UTF-8 file, and a RecursionError on a 1200-card reference chain. The baseline read-through listed five candidates, four of which survived verification and one of which needed correcting, and it missed the silent-flag, encoding and CRLF defects entirely. Worth knowing before you run it: the full protocol converges only after two consecutive quiet passes with fixes gated on build plus typecheck plus lint plus tests, so on a real product this is a long, expensive session, and the "a short list means you did not look hard enough" framing pushes toward padding on small targets.

Testowano: 2026-07-30 · Claude Code 2.x (agent harness)

Instalacja

git clone https://github.com/apoorvjain25/production-audit.git
mkdir -p ~/.claude/skills
cd production-audit && cp -r production-audit ~/.claude/skills/production-audit

Komendy i przykładowe prompty

  • /production-auditWieloaspektowy audyt gotowości produkcyjnej z dowodami file:line i bez zabezpieczeń

Skille uruchamiają się na zwykłe polecenia — bez komend do zapamiętania. Po instalacji aktywują go prompty takie jak te (po angielsku):

  • Audit this codebase before we launch, find everything wrong with file:line
  • Check whether our README and landing page claims match the implementation
  • Run a pre-launch production readiness review of the billing subsystem

Pełny raport →