production-audit
Local-evidence production readiness audit for shipped apps, pre-launch reviews
by affaan-mFree
Description
production-audit is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It runs a production readiness audit of a shipped application using evidence gathered locally. It is for questions such as whether an app is ready to ship, what could break in production, what was missed, and what must be fixed before a launch. It applies after a feature merges and needs a pre-deploy or post-merge risk check, before a public launch, demo, customer rollout or investor walkthrough, when CI is green but the user wants production risk rather than test status, and when a deployed URL, release branch, pull request or checkout is available for evidence. The listing says it is a rewrite of an older community idea that removes unpinned external execution and third-party data sharing, so the audit works from the repository and the running app rather than sending code elsewhere. A skill is a SKILL.md file of instructions that an AI agent loads when a task calls for it. It is free and open source, and the skills.sh listing shows a Snyk warning, with Gen Agent Trust Hub and Socket passing.…
Highlights
- Pre-launch and post-merge readiness audit
- Evidence gathered locally
- Works from a URL, branch or checkout
- Looks past green CI to production risk
Ratings & Reviews
No ratings yet
Be the first to rate production-audit.
People also visit
convex-launch-readiness
Run every Convex audit (authz, reviewer, advisor, insights) into one scored
automation-audit-ops
Evidence-first automation inventory and overlap audit workflow for ECC
deployment-patterns
Deployment workflows, CI/CD pipeline patterns, Docker containerization
enterprise-agent-ops
Operational controls for long-lived or cloud-hosted agent systems
production-audit FAQ
What does the production-audit skill do?
It audits a shipped app for production risk, answering whether it is ready and what would break, using local evidence.
Does it send my code to a third party?
The listing says it removes third-party data sharing and unpinned external execution from the original idea.
What can I point it at?
A deployed URL, a release branch, a pull request or a current checkout.
How do I install it?
Run: npx skills add https://github.com/affaan-m/ecc --skill production-audit
Is it free?
Yes. It is free and open source.
Are there security warnings?
The skills.sh listing shows Snyk with a warning, while Gen Agent Trust Hub and Socket pass.
What are the best production-audit alternatives?
Popular alternatives to production-audit include convex-launch-readiness, automation-audit-ops and canary-watch. See all production-audit alternatives