production-code-audit_skill

Overview

This skill autonomously deep-scans an entire codebase, understands architecture and patterns, and transforms the project into production-grade, corporate-quality code. It finds security, performance, architecture, testing, and quality issues and applies systematic fixes and optimizations. The result is verified by tests, metrics, and a comprehensive before/after report.

How this skill works

The skill first discovers the codebase automatically by listing and reading files, detecting languages, frameworks, entry points, and data flow. It then performs line-by-line inspections to identify architecture problems, security vulnerabilities, performance bottlenecks, code-quality defects, and missing tests. Finally, it applies targeted fixes and refactors, adds production infrastructure (logging, monitoring, health checks), runs the test suite, and generates a metrics-backed report.

When to use it

• When you tell the agent to "make this production-ready"
• When you request a full codebase audit or enterprise hardening
• When preparing for production deployment or compliance reviews
• When optimizing for security, performance, or maintainability
• When test coverage and CI/CD need to be added or improved

Best practices

• Scan the entire repository recursively; do not skip files
• Prioritize and fix critical security and data-loss issues first
• Measure impact with before/after metrics (performance, coverage, vulnerabilities)
• Run full test suites after each change to avoid regressions
• Document every change and add deployment and monitoring guides

Example use cases

• Convert a prototype or MVP into a production-grade service with logging, monitoring, and CI/CD
• Automatically fix OWASP Top 10 issues and remove hardcoded secrets
• Refactor monolithic god classes, remove circular dependencies, and split responsibilities
• Resolve N+1 queries, add caching, and optimize database indexes for low-latency APIs
• Add comprehensive tests and increase coverage to enterprise targets