Add deploy-readiness skill (local-to-cloud codebase scanner) #14

Closed
opened 2026-04-25 02:05:34 +00:00 by frank · 1 comment
Owner

Summary

New skill that scans codebases for local-to-cloud migration blockers. Unlike security-audit (a checklist), this actually reads code and reports concrete findings with file:line locations.

Categories scanned

  • Hardcoded URLs (.fmr.local, localhost, LAN IPs)
  • Hardcoded paths (D:\laragon, /home/user)
  • Dev bypasses (APP_ENV=development, hardcoded credentials)
  • Missing deploy config (no Dockerfile, no CI, no .env.example)
  • Database config (empty passwords, root user)
  • CORS origins (wildcard, localhost-only)
  • File storage (local disk writes)
  • Env secrets (API keys in source)

Output

  • Scored readiness report (0-100: READY/ALMOST/NEEDS WORK/NOT READY)
  • Per-finding file:line locations with matched code
  • DEPLOY_READINESS.md rendered doc

Tested

Scanned crumble: 264 files, 74 findings across 7 categories. All real issues.

## Summary New skill that scans codebases for local-to-cloud migration blockers. Unlike security-audit (a checklist), this actually reads code and reports concrete findings with file:line locations. ## Categories scanned - Hardcoded URLs (.fmr.local, localhost, LAN IPs) - Hardcoded paths (D:\laragon, /home/user) - Dev bypasses (APP_ENV=development, hardcoded credentials) - Missing deploy config (no Dockerfile, no CI, no .env.example) - Database config (empty passwords, root user) - CORS origins (wildcard, localhost-only) - File storage (local disk writes) - Env secrets (API keys in source) ## Output - Scored readiness report (0-100: READY/ALMOST/NEEDS WORK/NOT READY) - Per-finding file:line locations with matched code - DEPLOY_READINESS.md rendered doc ## Tested Scanned crumble: 264 files, 74 findings across 7 categories. All real issues.
frank closed this issue 2026-04-25 02:07:12 +00:00
Author
Owner

Implemented in 8ebc5a4. Scanner tested against crumble (264 files, 74 findings across 7 categories). Registered in children.json, marketplace.json, and all cross-agent docs updated.

Implemented in 8ebc5a4. Scanner tested against crumble (264 files, 74 findings across 7 categories). Registered in children.json, marketplace.json, and all cross-agent docs updated.
Sign in to join this conversation.
No description provided.