Does it provide a summary of the changes made?

Yes, it generates a comprehensive report including before/after metrics for performance, security status, and a detailed list of all issues fixed.

How does it ensure the code isn't broken during the audit?

The skill verifies all changes by running existing tests and adding new ones to ensure that optimizations and security fixes maintain the original application intent.

Does this skill only find issues or does it actually fix them?

The Production Code Auditor does both; it autonomously identifies vulnerabilities and bottlenecks, then systematically applies refactors and patches to resolve them automatically.

Can it handle secrets and environment variables?

Yes, it identifies hardcoded secrets, API keys, and passwords, automatically migrating them to secure environment variable configurations.

Production Code Auditor

Name: Production Code Auditor
Author: claudiodearaujo

byclaudiodearaujo

安全与测试

Transforms entire codebases into enterprise-grade, production-ready software by automatically fixing security vulnerabilities, performance bottlenecks, and architectural flaws.

关于

The Production Code Auditor is a comprehensive autonomous skill designed to bridge the gap between experimental prototypes and corporate-level production software. It performs deep, line-by-line scans of entire repositories to identify critical security risks, performance regressions, and technical debt. Beyond simple detection, it systematically implements fixes—refactoring architecture, optimizing database queries, hardening security protocols, and integrating essential production infrastructure like logging and CI/CD pipelines—ensuring your application meets professional enterprise standards with verifiable metrics.

主要功能

Autonomous codebase discovery and architectural dependency mapping
Deep security scanning for OWASP vulnerabilities and hardcoded secrets
0 GitHub stars
Automated integration of production logging, monitoring, and health checks
Automatic performance optimization including N+1 query fixes and caching
Comprehensive refactoring of god classes and complex logic for better maintainability

使用场景

Standardizing code quality and performance across legacy repositories before major releases
Hardening application security by removing vulnerabilities and implementing robust validation
Preparing a startup MVP for enterprise-level deployment and professional security audits

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter production-code-audit

For use in Claude.ai and ChatGPT

Download Skill

GitHub

关于