Ship readiness
ADVISORY pre-deploy / pre-handoff checklist (not a blocker). Use when preparing a project for deployment, release, or client/handoff to sanity-check it's genuinely ready — covers websites/landing pages, full-stack apps, APIs, dashboards, n8n workflows, scraping, AI/RAG chatbots, prediction systems, Telegram bots, and business automations. Trigger on "deploy", "ship", "go live", "release", "hand off".From its SKILL.md
npx -y skills add ForgeyClap/claude-forge --skill ship-readinessAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- 21 days oldThe repository was created 21 days ago. New is not bad, but a brand new repository carrying a familiar-sounding name is the shape a typosquat arrives in, and there has been no time for anyone else to find a problem with it.
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
3.0 KB, 565 tokens by cl100k_base, as published. Nobody here has run it
Ship-readiness (advisory checklist — not a blocker)
This is a practical checklist, not an enforced gate. Report items as pass/fail with evidence — never assert without checking. Nothing here blocks a build; it just helps you not hand off something broken. Production deploys should still have explicit user approval.
Universal
- No test mode, mock backend, or fake/sample data left in.
- No localhost URLs, debug/test banners, or debug-only UI.
- Secrets in env;
.env.exampleuses placeholders; no real secrets committed. - No unfinished placeholder content/copy.
- Forms submit and validate; error handling present on all I/O.
- Mobile and desktop layout intact; primary CTA clear.
- Optional: for important code, run the
codex-revieweragent (Codex) and/orsecurity-reviewer— advisory, not required.
Website / landing page
Perf/SEO/a11y pass; meta/OG + canonical; favicon; 404 route; no broken links; responsive at ~360/768/1280; no Lorem/test copy; CTAs/links resolve.
Full-stack app / auth
Auth enforced server-side on protected routes; input validation per endpoint; secrets out of the client bundle; DB migrations reversible; e2e green.
API integration
Retries/backoff + timeout; idempotent writes; consistent error envelope; pagination; webhook signature verification; safe logging.
Dashboard / data viz
Empty/loading/error states; correct aggregation (no silent NULL drops); timezone correctness; no PII leaked client-side.
n8n
Webhook method correct; input schema validated; credentials set (not hardcoded); error branch exists; retry/backoff defined; test/prod flows separated; validate_workflow clean. (Validation is good practice before calling it production-ready.)
Scraping / lead-gen
Public/official-API/permitted sources only; rate limits + robots respected; no login/paywall bypass; data storage lawful + minimal; outreach drafted only (no bulk send without explicit user confirmation).
AI / RAG / chatbot
Clear fallback for empty/low-confidence retrieval; source-aware answers; no hallucinated business facts; logging + human-handoff defined.
Prediction systems
No certainty claims; confidence/risk labels on outputs; data-source quality verified; backtest shown with sample size; no automatic real-money betting.
Telegram bot
Token in env only; webhook vs long-poll chosen; command allowlist; rate-limit; admin-only commands gated; graceful failure message.
Business automation
Dry-run vs live separated; no bulk-send without confirmation; audit log; rollback/dead-letter for failed calls.
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.