How does the scoring system work?

Projects receive a score out of 100 based on Security (40pts), Code Quality (25pts), Infrastructure (20pts), and Testing (15pts), with heavy deductions for critical vulnerabilities.

Can I get specific file paths for the identified issues?

Yes, by using the --detailed flag, the auditor provides specific file locations, code snippets, and exact remediation steps for every finding.

What is 'vibe-coded' or AI-generated code auditing?

It refers to identifying common pitfalls in code created by LLMs, such as hallucinated libraries, inconsistent patterns, and missing error-handling paths.

Does this skill support specific frameworks?

Yes, it adapts its audit logic for Next.js, React, FastAPI, Express, and Django to ensure framework-specific best practices are met.

Project Production Auditor

Name: Project Production Auditor
Author: kastheco

bykastheco

•

安全与测试

Performs automated production-readiness audits to identify security risks, code quality issues, and infrastructure gaps in AI-generated projects.

Project Production Auditor is a specialized Claude Code skill designed to evaluate the maturity of codebases, particularly those generated using AI or 'vibe-coding' techniques. It systematically analyzes projects across four critical dimensions—Security, Code Quality, Infrastructure, and Testing—providing a comprehensive readiness score and a prioritized remediation roadmap. By identifying common AI anti-patterns like hallucinated dependencies and missing error paths, this tool helps developers transform rapid prototypes into stable, production-grade applications.

主要功能

01Framework-specific checks for Next.js, FastAPI, Express, and Django

02Comprehensive scoring system (0-100) with pass/fail checklists

03Vibe-code detection for AI-generated anti-patterns and hallucinations

04Multi-phase automated auditing covering Security, Quality, and Infrastructure

052 GitHub stars

06Prioritized remediation reports categorized by severity and effort

使用场景

01Performing security and quality due diligence on legacy or inherited codebases

02Reviewing AI-generated prototypes before moving them to a production environment

03Standardizing production-readiness checklists across a development team

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add kastheco/claude-plugins project-auditor

For use in Claude.ai and ChatGPT

Download Skill