roedyrustam/vibes-plug/production-ready-hardener

Trust tier 2
  • community
LLM review pending
Source check pending

Checking that the SKILL.md file is still in the repository.

Pre-deployment application hardening across security, perf, and tests / Pengerasan aplikasi pra-deploy: keamanan, performa, dan tes.

Install

npx vskill@latest install roedyrustam/vibes-plug/production-ready-hardener

SKILL.md

Production-Ready Hardener

English | Bahasa Indonesia

<a name="english"></a>

English

Orchestration & Integration
  • Testing & Quality Assurance: autonomous-tdd-debugger, e2e-testing-expert, property-mutation-testing-expert, formal-spec-z3-verifier, ai-code-review-autonomous, coderabbit, zero-tech-debt-auditor
  • Security & Red Teaming: autonomous-red-teamer, prompt-injection-firewall, zero-trust-secret-vault, supabase-security-expert, firebase-security-expert
  • Frontend & Design Systems: senior-frontend, tailwind-expert, design-system-architect, modern-css-native-expert, ui-ux-pro-max, global-a11y-i18n-expert
  • Backend & Data Integrity: js-backend-expert, database-orm-expert, api-design-expert, spec-driven-development-expert, authentication-identity-expert
  • DevOps, CI/CD & Observability: ci-cd-devops-architect, github-actions-expert, cloud-hosting-expert, data-telemetry-expert, logging-error-tracking-expert, self-healing-cloud-orchestrator
  • Performance & SEO: performance-web-vitals, seo, app-analyzer-optimizer
  • Lifecycle & Governance: brainstorming, zero-to-prod-orchestrator, prd-architect, session-memory-manager, anti-slop
Description

The Production-Ready Hardener is a master orchestrator skill that combines and delegates to all relevant vibes-plug skills to ensure your application is rock-solid, secure, performant, and production-grade before deployment. It acts as a comprehensive pre-production checklist that leaves no stone unturned — from frontend polish to backend resilience, from data security to observability.

This skill does NOT replace individual skills — it coordinates them into a structured, phased audit-and-hardening workflow.

Orchestrated Skills Map
┌──────────────────────────────────────────────────────────────────┐
│              PRODUCTION-READY HARDENER                           │
│                 (Master Orchestrator — 7 Phases)                 │
├──────────────────────────────────────────────────────────────────┤
│                                                                  │
│  ┌─── PHASE 1: Architecture & Code Quality ───────────────────┐  │
│  │  • scalability-clean-code (SOLID, DRY, Clean Architecture)  │  │
│  │  • fullstack-expert (Design & polyglot patterns)            │  │
│  │  • app-analyzer-optimizer (Deep codebase & bottleneck audit)│  │
│  │  • monorepo-architect (Turborepo & pnpm workspace structure)│  │
│  │  • dependency-upgrade-migrator (Codemod & package audits)  │  │
│  │  • anti-slop (Eliminate conversational & code slop)        │  │
│  │  • typescript-expert (Strict mode & type-safe patterns)    │  │
│  └────────────────────────────────────────────────────────────┘  │
│                                                                  │
│  ┌─── PHASE 2: Frontend Hardening ────────────────────────────┐  │
│  │  • senior-frontend (React 19, Next.js 15 App Router)       │  │
│  │  • design-system-architect (Tokens, Radix, Base UI, WCAG)  │  │
│  │  • tailwind-expert (CSS-first config, OKLCH, responsive)   │  │
│  │  • form-validation-expert (React Hook Form, Zod validation)│  │
│  │  • state-management-expert (Zustand, Jotai, TanStack Store)│  │
│  │  • ui-ux-pro-max / hig (HIG principles & design system)    │  │
│  │  • global-a11y-i18n-expert (Web accessibility & i18n)      │  │
│  │  • mobile-expo-expert / tauri-expert (Mobile & Desktop)    │  │
│  └────────────────────────────────────────────────────────────┘  │
│                                                                  │
│  ┌─── PHASE 3: Backend & AI Services ─────────────────────────┐  │
│  │  • js-backend-expert (Node 24, Bun 1.2, Fastify, Hono)     │  │
│  │  • go-programming-expert (Go 1.25+, microservices, gRPC)   │  │
│  │  • python-programming-expert (Python 3.13+, FastAPI, uv)   │  │
│  │  • rust-programming-expert (Rust 2024, Axum, async)        │  │
│  │  • database-orm-expert (Prisma 6, Drizzle, Edge DBs, RLS)  │  │
│  │  • cron-scheduler-expert / async-queue-temporal-expert     │  │
│  │  • email-notification-expert (Email & Push notifications)  │  │
│  │  • file-upload-media-expert (S3, Presigned URLs, CDN)      │  │
│  │  • mcp-server-architect (MCP Server Tools & Zod schemas)   │  │
│  │  • multi-agent-orchestration / ai-llm-integration-expert   │  │
│  └────────────────────────────────────────────────────────────┘  │
│                                                                  │
│  ┌─── PHASE 4: Security Hardening ────────────────────────────┐  │
│  │  • supabase-security-expert (RLS policies, Supabase Linter)│  │
│  │  • firebase-security-expert (Rules, App Check, data leak)  │  │
│  │  • authentication-identity-expert (OAuth2, RBAC/ABAC)     │  │
│  │  • zero-trust-secret-vault (Vault, Infisical, key rotation)│  │
│  │  • rate-limit-abuse-prevention (Rate limit & bot protection)│ │
│  │  • secure-fuzz-testing (Coverage-guided fuzzing)           │  │
│  │  • fullstack-expert (OWASP Top 10 & defense-in-depth)      │  │
│  └────────────────────────────────────────────────────────────┘  │
│                                                                  │
│  ┌─── PHASE 5: Testing & Quality Assurance ───────────────────┐  │
│  │  • e2e-testing-expert (Playwright E2E & Vitest integration)│  │
│  │  • browser-automation-expert (Visual regression testing)   │  │
│  │  • secure-fuzz-testing (Security fuzz testing)             │  │
│  │  • error-resilience-expert (Retry logic & circuit breakers)│  │
│  │  • logging-error-tracking-expert (Pino, Sentry correlation)│  │
│  │  • coderabbit (AI code review & PR summarization)          │  │
│  └────────────────────────────────────────────────────────────┘  │
│                                                                  │
│  ┌─── PHASE 6: Performance & GEO/SEO ─────────────────────────┐  │
│  │  • seo (Technical SEO, Schema, Sitemap, E-E-A-T audit)     │  │
│  │  • seo-geo (Generative Engine Optimization & llms.txt)     │  │
│  │  • seo-aeo-landing-page-writer (AEO conversion landing)    │  │
│  │  • performance-web-vitals (CWV: LCP, INP, CLS optimization)│  │
│  │  • app-analyzer-optimizer (Bundle analysis & dynamic loading)│
│  └────────────────────────────────────────────────────────────┘  │
│                                                                  │
│  ┌─── PHASE 7: DevOps & Deployment ───────────────────────────┐  │
│  │  • ci-cd-devops-architect (GitHub Actions, Docker, IaC)    │  │
│  │  • cloud-hosting-expert (Vercel, Cloudflare Workers, AWS)  │  │
│  │  • data-telemetry-expert (OpenTelemetry, PostHog metrics)  │  │
│  │  • session-memory-manager (State checkpoints & handoff)    │  │
│  │  • prd-architect (ADR records & changelog updates)         │  │
│  └────────────────────────────────────────────────────────────┘  │
│                                                                  │
└──────────────────────────────────────────────────────────────────┘
Execution Protocol

When this skill is triggered, execute the following 7-phase hardening process in order. Each phase produces findings and recommendations. At the end, compile a Production Readiness Report.

PHASE 1: Architecture & Code Quality Audit

Orchestrates: scalability-clean-code, fullstack-expert, app-analyzer-optimizer, monorepo-architect, dependency-upgrade-migrator, zero-tech-debt-auditor, typescript-expert

Checklist:

  • [ ] Project structure follows clean architecture (Domain → Use Cases → Adapters → Infrastructure)
  • [ ] SOLID principles are applied consistently — no god classes, no leaky abstractions
  • [ ] DRY violations identified and refactored into shared utilities/services
  • [ ] API contracts are spec-first (OpenAPI/GraphQL schema) with proper versioning
  • [ ] Error handling is structured and consistent (RFC 9457 Problem Details or equivalent)
  • [ ] TypeScript strict mode enabled (strict: true in tsconfig), no any types (typescript-expert)
  • [ ] Input validation on all API boundaries (Zod, Pydantic, or equivalent)
  • [ ] No hardcoded values — all config via environment variables or config files
  • [ ] Sovereign Anti-Slop Audit Passed — mandatory validation via node scripts/check-anti-slop.js --strict to verify 0 placeholders, 0 stubs, 0 syntax comments, and 0 debug logs (anti-slop)
  • [ ] Dependency audit — all packages up-to-date, no known CVEs (dependency-upgrade-migrator, npm audit)
PHASE 2: Frontend Hardening

Orchestrates: senior-frontend, design-system-architect, tailwind-expert, form-validation-expert, state-management-expert, design-system-architect, senior-frontend, ui-ux-pro-max, hig, tanstack-query-expert, global-a11y-i18n-expert

Checklist:

  • [ ] Server Components by default — 'use client' only when truly needed (state, events, browser APIs)
  • [ ] Proper Suspense boundaries with meaningful loading states (skeletons, not spinners)
  • [ ] Error boundaries on all page segments with user-friendly error UI
  • [ ] Form validation — robust validation with React Hook Form + Zod (form-validation-expert)
  • [ ] No hydration mismatches — no client-only state (localStorage, window) in initial render
  • [ ] Accessibility (a11y) & i18n — WCAG 2.2 compliance, ARIA, keyboard nav (global-a11y-i18n-expert)
  • [ ] Responsive design — works flawlessly on mobile (320px), tablet, and desktop (tailwind-expert)
  • [ ] Image optimization — next/image with proper sizes, WebP/AVIF format, lazy loading
  • [ ] Font optimization — next/font with font-display: swap, preconnect to font CDN
  • [ ] Bundle analysis — no unnecessary large libraries, proper code splitting & lazy loading
  • [ ] Meta tags — proper title, description, OG tags, canonical URL on every page
  • [ ] State management — TanStack Query for server state, Zustand/Jotai for client state (state-management-expert)
  • [ ] Caching strategy — proper staleTime, gcTime, and query key factory patterns
  • [ ] UI consistency — design tokens applied consistently (design-system-architect)
PHASE 3: Backend & AI Services Hardening

Orchestrates: js-backend-expert, go-programming-expert, python-programming-expert, rust-programming-expert, database-orm-expert, cron-scheduler-expert, async-queue-temporal-expert, email-notification-expert, file-upload-media-expert, mcp-server-architect, multi-agent-orchestration, llm-finops-router

This is the start of the file. Read the full SKILL.md on GitHub.

Security

  • Security scanPassed, 100 of 100Pattern checks on the skill's files.
  • Model reviewNot runA model review is scheduled for the next rescan.

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

Repository stars
57
Repository forks
10
Repository npm downloads, 7 days
11
7-day trend score
31

Stars and forks are for the whole GitHub repository, not this skill alone. Downloads are for the repository's npm package. Refreshed 12 Sep 2026, a month ago.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/roedyrustam/vibes-plug/production-ready-hardener/badge)](https://verified-skill.com/skills/roedyrustam/vibes-plug/production-ready-hardener)

Something wrong with this skill or its page? Tell us.