Install
$ agentstack add skill-btfranklin-skills-review-agent-production-readiness ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Review Agent Production Readiness
Use this skill as a second-pass production review for Agents SDK work. It is not a replacement for the official OpenAI Agents SDK skill or current OpenAI documentation.
Workflow
- Establish the target workflow: user goal, input/output contract, tools, state, side effects, approval gates, runtime surface, and whether the design is single-agent, multi-agent, sandbox-backed, or explicitly orchestrated code.
- If the request requires current SDK APIs, implementation changes, sandbox semantics, eval platform config, or deployment commands, read the official Agents SDK docs or use the official OpenAI Agents SDK skill first.
- Read
references/production-readiness-checklist.mdfor the applicable review lenses. - Review the real artifact whenever available: source code, prompts, tool schemas, eval cases, traces, logs, deployment config, runbooks, dashboards, or incident notes.
- Report concrete gaps before general advice. Separate must-fix launch blockers from follow-up hardening.
Review Stance
- Prefer the simplest architecture that satisfies the workflow. Start with one agent and explicit code orchestration unless specialization, handoffs, or sandbox execution have a clear payoff.
- Treat every tool as a production interface: validate inputs, constrain permissions, bound runtime, make side effects idempotent where possible, and require approvals for irreversible or externally visible actions.
- Judge evals against behavior that matters: task success, required or forbidden tool calls, approvals, guardrails, state changes, traceability, failure handling, cost, and latency.
- Require observability that can diagnose real failures: trace IDs, tool-call logs, error classes, turn counts, latency/cost signals, escalation events, and enough context to reproduce issues without leaking secrets.
- Keep governance practical: scoped credentials, privacy controls, audit logs, rollout/rollback paths, human escalation, and ownership for incidents.
Output Shape
For reviews, lead with findings ordered by severity and include file or artifact references when possible. Then include:
- Architecture fit: whether single-agent, multi-agent, sandbox, or explicit orchestration is justified.
- Launch blockers: issues that can cause unsafe actions, incorrect results, runaway cost, privacy exposure, or inability to debug.
- Eval gaps: missing cases or grading signals needed before trusting the workflow.
- Operations gaps: missing monitoring, alerting, rollout, rollback, cost/latency, or human-oversight controls.
- Next actions: a short, ordered hardening plan.
For design/planning requests, produce a production-readiness checklist tailored to the workflow rather than a generic essay.
For a worked review shape, read [examples/readiness-review-output.md](examples/readiness-review-output.md) when producing a full report.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: btfranklin
- Source: btfranklin/skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.