What problem does it solve? Teams often mistake green CI for production readiness and ship with hidden risks like non-idempotent webhooks, missing rollback paths, or exposed secrets. This Skill performs a local-evidence audit of your repo and deployment surface to answer "what breaks in prod?" without sending code to external services. ## Core Features & Use Cases - Evidence-Based Scoring: Produces a 0-100 readiness score with bands (Blocked, Risky, Launchable With Caveats, Strong) and hard caps for critical gaps like missing auth or non-idempotent payment webhooks. - Structured Risk Lenses: Systematically inspects security and auth, data integrity, payments and webhooks, operations, and user experience boundaries that actually exist in the repo. - Privacy-Safe Auditing: Uses only local git history, CI configs, migrations, and user-authorized checks, never uploading source or secrets to third-party scanners. - Use Case: Before a public launch, ask whether your app is ready to ship and receive a score, a list of blockers, high-value fixes, evidence checked, and one concrete next action. ## Quick Start Ask the assistant to audit this repository for production readiness and tell you what would break in production before launch.
