What triggers a 'Blocked' audit score?

A score below 50 (Blocked) is triggered by critical failures like missing auth on sensitive data, exposed secrets, or unsafe database migrations.

How does this differ from a standard security review?

While it includes security, this skill focuses on holistic operational readiness, including payment idempotency, migration safety, and deployment workflows.

Does this skill send my code to third-party scanners?

No, it is designed to use local evidence and explicitly avoids uploading repository data to external services without your direct approval.

Can I use this for libraries and templates?

It is optimized for applications, but can be used for libraries if you specifically want to audit packaging and release readiness.

What evidence does the skill check?

It inspects git history, CI workflows, Docker files, API routes, middleware, environment documentation, and database migration scripts.

Production Audit Claude Code Skill | Pre-Launch Risk Review

Production Audit provides a comprehensive, privacy-first review of your codebase to ensure it is ready for deployment. Unlike generic external scanners, it analyzes the specific release surface—including authentication boundaries, payment webhooks, database migrations, and CI status—using only local repository data. It assigns a prioritized readiness score and identifies critical 'must-fix' blockers, helping maintainers ship with confidence without leaking sensitive repository topology or data to external services.

Key Features

01Privacy-focused local analysis of authentication and security boundaries

02Database migration safety and rollback path assessment

03Operational checks for environment variables, logs, and health checks

04214,448 GitHub stars

05Verification of payment webhook idempotency and fulfillment logic

06Prioritized readiness scoring to identify immediate deployment blockers

Use Cases

01Performing a final risk check before a public launch or customer rollout

02Conducting post-merge audits to ensure new features haven't introduced production risks

03Identifying hidden operational gaps when CI tests are passing but the app isn't production-ready

Tieline — product intent grounded in code

Production Audit

Key Features

Use Cases

1Password CLI

GateGuard Pre-Action Gate

Quarkus Verification

Key Features

Use Cases