ship-gate

Audit codebases for pre-production shipping risks across eight release-readiness categories.

Updated Apr 24, 2026
One-click install
npx skills add https://github.com/Veloxia-agency/VELOXIA-WEB --skill ship-gate-veloxia-agency
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ship-gate
Source: https://github.com/Veloxia-agency/VELOXIA-WEB/tree/main/.claude/skills/engineering/skills/ship-gate
Command: npx skills add https://github.com/Veloxia-agency/VELOXIA-WEB --skill ship-gate-veloxia-agency

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps teams catch release-blocking problems before deployment by auditing a codebase for security, database, quality, dependency, frontend, observability, and deployment risks.

Core Features & Use Cases

  • Pre-production audit: Reviews a repository and classifies findings as pass, fail, skip, or manual across eight release-readiness categories.
  • Stack-aware checking: Detects common frameworks, databases, auth systems, deploy targets, and AI usage so only relevant checks are applied.
  • Release readiness reporting: Produces a clear ship or do-not-ship verdict with file-level findings and manual confirmation items.
  • Use Case: Before a product launch, use this Skill to scan the app for secrets, missing authentication, unsafe queries, weak observability, and other blockers that should be fixed before going live.

Quick Start

Ask the assistant to run the ship gate audit on this repository and summarize the critical, high, and advisory findings.

Frequently Asked Questions about ship-gate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for production readiness blockers before deployment?

A release readiness audit scans your codebase across security, database, code quality, dependencies, frontend, observability, and deployment categories, producing a definitive ship or do-not-ship verdict with file-level findings and manual confirmation items.

What is stack detection in pre-production security scanning?

Stack detection identifies your repository's frameworks, databases, auth systems, deploy targets, and AI usage so only relevant release-readiness checks are applied, avoiding irrelevant alerts during your pre-production audit.

Can I run a release audit on both web backend and AI projects?

Yes, you can run a release audit on web, backend, and AI projects. The audit detects common frameworks, databases, auth systems, and AI usage to apply only relevant checks across security, quality, and observability categories.

How do I check for missing authentication and unsafe queries before a product launch?

Check for missing authentication and unsafe queries by running a pre-production audit that scans for secrets, auth gaps, and unsafe database queries, classifying findings as pass, fail, skip, or manual across eight release-readiness categories.

What manual confirmation items are required for a go-live checklist?

Manual confirmation items for a go-live checklist include non-automated release controls that cannot be programmatically scanned, requiring developer verification before the audit yields a final ship verdict.