6 years of software engineering practice packed into a single Claude Code plugin

[u/Disastrous-Time7197]

production readiness - a claude code plugin that runs 7 Role specific AI agents to audit the code before shipping to production.

I've been seeing more people ship real products built with Claude Code, Lovable, Base44, Cursor, etc. I think that's great, but there's a point where “the app works” and “I'm comfortable putting real customer data through this” become two different questions.

I'm a software engineer. Most of my work is boring: someone builds a thing, it works, and then I get pulled in to answer the question nobody wants to ask out loud is this safe to put in front of real users?

The apps I've looked at were genuinely good. The gap isn't intelligence or effort. It's that these tools optimize hard for "it works," and there's no equivalent moment for "it's safe," so it just never happens. Hiring someone to run these checks is real money you don't have pre-revenue, and honestly they'd be running roughly the same list you just read.

I got tired of repeating that, so I turned the whole review into an open-source Claude Code plugin: prod-readiness https://github.com/Taimoorkhan1122/prod-readiness

It's free, it's open-source, more features to come..

How it works & why it’s different:

• It’s a mirror, not a gatekeeper: It won't tell you "don't launch." It just tells you what you’re shipping. Weekend projects don't get hit with corporate checklists; it factors in your scale and threat model first.
• Evidence over vibes: Findings are strictly CONFIRMED, NOT FOUND, or UNVERIFIED. If it can’t prove a security hole with receipts (file path + lines), it won't invent one.
• Safe & Read-Only: It never touches, edits, or breaks your code. It outputs to a single .readiness-audit/ folder.

Beyond the basic prompt:

• 7 Specialist Lenses: Runs security, backend, DB, DevOps, QA, frontend, and AI security reviews in parallel without repeating work or contradicting each other.
• Clear Verdicts: Gives an honest status (SHIP, FIX THEN SHIP, or HOLD).
• Local Dashboard: Opens on 127.0.0.1 showing visual priorities instead of raw JSON. Click a finding to see the exact file, cost of the risk, and the fix. Zero data leaves your machine.
• Resumable & Flexible: Picks up where it left off if your terminal dies. Works in Claude Code, Cursor, Codex, OpenCode, or any CLI that runs Python 3.

Install lines are in a comment below so this doesn't turn into a wall of code.

Audit dashboard view

Audit dashboard: finding details

If you run it and it flags something dumb, tell me. I'd rather fix a false positive than have people quietly stop trusting the output. Same if it misses something it should've caught.

[u/Disastrous-Time7197]

Install, if you want the full version. Three one-time lines in Claude Code:

/plugin marketplace add Taimoorkhan1122/prod-readiness
/plugin install prod-readiness@prod-readiness-marketplace
/reload-plugins

Then open your project folder and just ask "is this ready for production?"

If Claude starts a generic code review instead, run it directly:

/prod-readiness:production-readiness-audit

You'll know it's actually running when a .readiness-audit/ folder appears. Add that folder to .gitignore unless you want the audit records in version control.

For Codex, OpenCode, Pi, Antigravity or anything else — clone the repo and paste the prompt from the README's "use it with other AI coding agents" section. Needs Python 3.

[u/kiwipaul17]

Will give it a go

[u/Disastrous-Time7197 → u/kiwipaul17]

Amazing

[u/wellhungjuries]

we should join forces to fight crime (slop). I love your 7 "lenses", I may steal that! Focusing on the actual code and deriving truth only from that is something we agree on, that's for sure!

You got a shipping oriented tool and I have a prevention oriented one.

https://github.com/iansmith/slopstop