mvp-audit

Audit TypeScript/React-like MVP codebases for production readiness and write findings to a report.

Updated Apr 13, 2026
One-click install
npx skills add https://github.com/fosejary/simple-todo --skill mvp-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mvp-audit
Source: https://github.com/fosejary/simple-todo/tree/main/.claude/skills/mvp-audit
Command: npx skills add https://github.com/fosejary/simple-todo --skill mvp-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It reduces the risk of launching an MVP that isn’t production-ready by systematically auditing code quality, security, performance, and missing product capabilities, then producing an actionable priority plan.

Core Features & Use Cases

  • MVP codebase scan: Reviews project structure, dependency health in package.json, and TypeScript configuration (e.g., strict mode).
  • Code quality analysis: Checks error handling patterns, type safety (e.g., any usage), duplication, and unused imports.
  • Security & production hardening: Assesses Supabase RLS and policy adequacy, authentication/session handling, input validation/sanitization, secrets management, and protected API access.
  • Performance analysis: Flags bundle bloat, unnecessary re-renders, list virtualization opportunities, image optimization gaps, and inefficient network/query patterns.
  • Missing feature detection: Identifies gaps in error/loading/empty-state UI, offline handling, accessibility (a11y), logging/monitoring, and i18n readiness.
  • Phase 2 re-evaluation & prioritization: Recomputes implementation difficulty for Phase 2 items and generates a weighted impact×effort matrix.

Quick Start

Run the mvp-audit skill to generate a complete production audit report and save it to _workspace/06_audit_report.md.

Frequently Asked Questions about mvp-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my MVP codebase for production readiness?

To audit MVP production readiness, scan the codebase for code quality, security, performance, and missing features. This process checks TypeScript strict mode, dependency health, and Supabase RLS policies to produce a remediation priority matrix.

What is the best way to check Supabase RLS and security hardening before launch?

Checking Supabase RLS and security hardening involves assessing authentication sessions, input validation, secrets management, and protected API access. An MVP audit identifies policy adequacy and flags vulnerabilities to ensure production-ready security.

How do I prioritize fixes after a pre-launch code quality and performance review?

Prioritize fixes after a code quality and performance review by generating a weighted impact versus effort matrix. This prioritization matrix re-evaluates Phase 2 items and maps remediation tasks based on implementation difficulty and production impact.

Can I use an MVP audit for TypeScript and React projects using Supabase?

Yes, an MVP audit is designed for pre-launch engineering reviews of TypeScript and React-like projects using Supabase. It evaluates project structure, type safety, error handling, and bundle bloat specific to this tech stack.

What missing features are commonly found during MVP production hardening assessments?

Common missing features found during MVP production hardening include error, loading, and empty-state UI, offline handling, accessibility (a11y), logging and monitoring, and i18n readiness. These gaps are flagged during the codebase scan.

Does an MVP audit detect performance issues like bundle bloat and unnecessary re-renders?

Yes, an MVP audit detects performance issues by flagging bundle bloat, unnecessary re-renders, list virtualization opportunities, image optimization gaps, and inefficient network or query patterns within the codebase.