Enterprise-grade production readiness assessment system for comprehensive codebase evaluation. Use when (1) Evaluating a GitHub repository for production deployment, (2) Conducting pre-launch security and architecture reviews, (3) Assessing technical debt and system reliability, (4) Identifying gaps, vulnerabilities, and incomplete features, (5) Generating actionable remediation plans for engineering teams, (6) Validating scalability, observability, and operational readiness, (7) Reviewing cost optimization and resource efficiency, (8) Auditing compliance with industry standards (SOC2, GDPR, HIPAA, PCI-DSS), (9) Evaluating API contracts and integration stability, (10) Assessing team knowledge transfer and documentation completeness. Performs CTO-level multi-dimensional analysis exceeding top-tier tech company standards.
Performs CTO-level production readiness assessment of GitHub repositories, evaluating security, architecture, reliability, and 12 other critical dimensions. Use when reviewing codebases for production deployment, conducting pre-launch audits, or generating remediation plans for engineering teams.
/plugin marketplace add mjohnson518/claude_superpowers/plugin install mjohnson518-claude-superpowers@mjohnson518/claude_superpowersThis skill inherits all available tools. When active, it can use any tool Claude has access to.
references/api-standards.mdreferences/compliance-frameworks.mdreferences/devops-maturity.mdreferences/observability-standards.mdreferences/scalability-patterns.mdreferences/security-deep-dive.mdreferences/testing-standards.mdscripts/clone_repo.pyscripts/generate_report.pyscripts/production_readiness.pyEnterprise-grade production readiness evaluation framework that exceeds the standards of top-tier technology companies (Google, Meta, Amazon, Microsoft). This skill conducts exhaustive multi-dimensional analysis of any GitHub repository to determine production deployment readiness.
Production readiness is not just about working code—it encompasses security posture, operational excellence, scalability architecture, observability infrastructure, compliance requirements, cost efficiency, and team preparedness. This skill evaluates all dimensions systematically.
# Clone and analyze a GitHub repository
python scripts/production_readiness.py https://github.com/owner/repo
# Generate comprehensive report
python scripts/production_readiness.py https://github.com/owner/repo --output report.md
# Specific dimension analysis
python scripts/production_readiness.py https://github.com/owner/repo --focus security,performance
This framework evaluates 15 critical dimensions:
| Dimension | Weight | Description |
|---|---|---|
| Security | Critical | Vulnerabilities, auth, encryption, secrets management |
| Architecture | Critical | Design patterns, scalability, modularity |
| Reliability | Critical | Error handling, fault tolerance, recovery |
| Performance | High | Latency, throughput, resource efficiency |
| Observability | High | Logging, metrics, tracing, alerting |
| Testing | High | Coverage, quality, automation |
| DevOps | High | CI/CD, IaC, deployment strategies |
| Data Management | High | Migrations, backups, consistency |
| API Contracts | Medium | Versioning, documentation, stability |
| Documentation | Medium | Code docs, runbooks, architecture diagrams |
| Compliance | Variable | Regulatory requirements (GDPR, SOC2, etc.) |
| Cost Optimization | Medium | Resource efficiency, scaling costs |
| Dependencies | Medium | Currency, vulnerabilities, licensing |
| Configuration | Medium | Secrets, environment management |
| Team Readiness | Medium | Knowledge transfer, on-call procedures |
python scripts/clone_repo.py <github_url> --depth full
Execute comprehensive project discovery:
python scripts/discovery_analyzer.py <project_path>
Outputs:
python scripts/security_scanner.py <project_path> --level exhaustive
Comprehensive security checks:
Critical Security Controls:
Dependency Security:
Infrastructure Security:
See references/security-deep-dive.md for OWASP Top 10 detailed analysis.
python scripts/architecture_analyzer.py <project_path>
Evaluates:
python scripts/debt_analyzer.py <project_path>
Identifies:
python scripts/reliability_analyzer.py <project_path>
Checks:
Evaluates preparedness for:
python scripts/performance_analyzer.py <project_path>
Analyzes:
python scripts/observability_analyzer.py <project_path>
Evaluates:
python scripts/testing_analyzer.py <project_path>
Evaluates:
python scripts/devops_analyzer.py <project_path>
Checks:
python scripts/data_analyzer.py <project_path>
Evaluates:
python scripts/api_analyzer.py <project_path>
Checks:
python scripts/docs_analyzer.py <project_path>
Evaluates:
python scripts/compliance_analyzer.py <project_path> --frameworks soc2,gdpr,hipaa,pci
Checks per framework. See references/compliance-frameworks.md for detailed requirements.
python scripts/cost_analyzer.py <project_path>
Evaluates:
python scripts/dependency_analyzer.py <project_path>
Checks:
python scripts/team_readiness_analyzer.py <project_path>
Evaluates:
python scripts/generate_report.py <project_path> --format markdown
Report includes:
Each finding includes:
Issue: [Specific problem description]
Severity: [Critical/High/Medium/Low]
Dimension: [Security/Architecture/etc.]
Location: [File paths and line numbers]
Impact: [Business and technical impact]
Root Cause: [Why this issue exists]
Remediation: [Step-by-step fix instructions]
Validation: [How to verify the fix]
Effort: [Estimated engineering hours]
References: [Relevant standards and best practices]
Score = Σ(Dimension Score × Weight) / Σ(Weights)
Readiness Levels:
Consult these reference guides for detailed requirements:
references/security-deep-dive.md - OWASP Top 10 and security patternsreferences/scalability-patterns.md - Horizontal scaling and resiliencereferences/observability-standards.md - Logging, metrics, tracing requirementsreferences/compliance-frameworks.md - SOC2, GDPR, HIPAA, PCI-DSS detailsreferences/api-standards.md - RESTful API best practicesreferences/testing-standards.md - Coverage requirements and test qualityreferences/devops-maturity.md - CI/CD and deployment best practicesThis skill should be used when the user asks to "create a slash command", "add a command", "write a custom command", "define command arguments", "use command frontmatter", "organize commands", "create command with file references", "interactive command", "use AskUserQuestion in command", or needs guidance on slash command structure, YAML frontmatter fields, dynamic arguments, bash execution in commands, user interaction patterns, or command development best practices for Claude Code.
This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, or agent development best practices for Claude Code plugins.
This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentions hook events (PreToolUse, PostToolUse, Stop, SubagentStop, SessionStart, SessionEnd, UserPromptSubmit, PreCompact, Notification). Provides comprehensive guidance for creating and implementing Claude Code plugin hooks with focus on advanced prompt-based hooks API.