audit-production-readiness

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By kingggg5/shipproof (GitHub) · security · 19 stars · scanned at commit 09adda6

Audit a repository or service for release-blocking bugs, security, data/privacy, AI-agent, supply-chain, operability, and scale risks. Use for deep code audits, threat models, pre-production reviews, vulnerability triage, incidents, defensive investigation, release gates, or evidence-based 10k-to-1M-user readiness.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 6 places.

skills/audit-production-readiness/SKILL.md, line 32python scripts/scan_repo.py /path/to/repo --format markdown --output shipproof-report.md --fail-on high
skills/audit-production-readiness/SKILL.md, line 38python scripts/scan_repo.py . --format sarif --output shipproof.sarif --fail-on high
skills/audit-production-readiness/SKILL.md, line 56python scripts/capacity_model.py --users 1000000 --dau-ratio 0.25 --peak-hour-ratio 0.20 \

Show 3 more

skills/audit-production-readiness/SKILL.md, line 100python scripts/scan_repo.py . --format json --baseline-out .shipproof-baseline.json --fail-on none
skills/audit-production-readiness/scripts/worktree_manager.py, line 32proc = subprocess.run( # noqa: S603
skills/audit-production-readiness/scripts/worktree_manager.py, line 146proc = subprocess.run( # noqa: S603

Connects to the internet

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 3 places.

skills/audit-production-readiness/scripts/capacity_model.py, line 465const response = http.request(route.method, `${{baseUrl}}${{route.path}}`, body, {{
skills/audit-production-readiness/scripts/impact_graph.py, line 635r"|axios\s*\.\s*(?P<http_method>get|post|put|delete|patch|request)\s*\("
skills/audit-production-readiness/scripts/invariants.py, line 255"httpx.",

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'audit-production-readiness' ] || [ -L ~/.agents/skills/'audit-production-readiness' ]; then echo 'A skill folder named audit-production-readiness already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/kingggg5/shipproof' "$d" && git -C "$d" checkout --quiet '09adda62066122dd8f3614592bf6a505fde6e6a1' -- 'skills/audit-production-readiness' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/audit-production-readiness' ~/.agents/skills/'audit-production-readiness' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'audit-production-readiness' ~/.claude/skills/'audit-production-readiness' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for kingggg5/shipproof shows the score of its lowest-scoring skill.

SkillTrust badge for kingggg5/shipproof

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/kingggg5/shipproof.svg)](https://zalavijaysinh.github.io/skilltrust/repos/kingggg5/shipproof/)

Score history

Date	Version	Score
2026-11-11	`09adda6`	92