pre-deploy-security

Execute a pre-deploy security checklist for production deployments in CI/CD pipelines.

Updated Feb 9, 2026
One-click install
npx skills add https://github.com/Xza85hrf/claude-code-agent-kit --skill pre-deploy-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pre-deploy-security
Source: https://github.com/Xza85hrf/claude-code-agent-kit/tree/main/.claude/skills/quality/pre-deploy-security
Command: npx skills add https://github.com/Xza85hrf/claude-code-agent-kit --skill pre-deploy-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Production deployments carry irreversible consequences. This skill provides a comprehensive pre-deploy security checklist to ensure deployments are hardened against common vulnerabilities before going live, including OWASP Top 10 reviews, automated scans, and infrastructure hygiene.

Core Features & Use Cases

  • Manual security reviews (OWASP Top 10) and risk assessment to validate secure design and implementation.
  • Automated security testing with OWASP ZAP and Snyk, plus hardening guidance for databases (Row-Level Security), network protections (DDoS protection, rate limiting), and domain security (DNSSEC, WHOIS privacy).
  • Governance and compliance documentation, with clear pass criteria, risk sign-off, and remediation guidance for production deployments in CI/CD.

Quick Start

Run the Pre-Deploy Security Checklist before deploying to production to validate that security controls and governance policies are in place.

Frequently Asked Questions about pre-deploy-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-deploy security checklist in a CI/CD pipeline?

Run a pre-deploy security checklist in your CI/CD pipeline by executing manual OWASP Top 10 reviews, automated Snyk and OWASP ZAP scans, and infrastructure checks for RLS, DDoS protection, and DNSSEC before production deployment.

What security checks are needed before deploying to production?

Required pre-deploy security checks include OWASP Top 10 manual reviews, automated vulnerability scans with Snyk and OWASP ZAP, database Row-Level Security validation, rate limiting, DDoS protection, DNSSEC, and WHOIS privacy verification.

Does this pre-deploy security checklist support governance and compliance documentation?

Yes, the pre-deploy security checklist satisfies governance and compliance needs by generating explicit documentation with defined pass criteria, remediation guidance, and risk sign-off for production deployments.

Can I use OWASP ZAP and Snyk for automated security testing before deployment?

Yes, you can use OWASP ZAP and Snyk for automated security testing. The checklist integrates these tools to run automated scans across staging and production environments to identify vulnerabilities before release.

How do I validate database Row-Level Security before a production release?

Validate database Row-Level Security by executing the pre-deploy checklist's database security checks, which verify RLS configurations across staging and production environments to ensure data access controls are properly hardened.

What is the best way to harden network and domain security before deployment?

The best way to harden network and domain security pre-deploy is to verify DDoS protection, rate limiting, DNSSEC, and WHOIS privacy configurations using a comprehensive security checklist with explicit pass criteria and remediation guidance.