← 返回 Skills 市场
898
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install production-readiness
功能描述
Meta-skill that orchestrates logging, monitoring, error handling, performance, security, deployment, and testing skills to ensure a service is fully production-ready before launch. Use before first deploy, major releases, quarterly reviews, or after incidents.
安全使用建议
This meta-skill itself is plausible and light-weight, but it works by reading and executing instructions from many other skills/agents. Before installing: 1) Verify provenance — prefer a published repo/homepage and a maintainer you trust; the package metadata here has no homepage and source is unknown. 2) Inspect every referenced skill/agent (logging-observability, security-review, docker-expert, testing-workflow, performance-agent, deployment-agent, etc.) — review their SKILL.md, README, and any code for required env vars, network endpoints, or install scripts. 3) Be cautious about credentials: do not provide AWS/ Vault/ database secrets or CI tokens unless you’ve reviewed the downstream skill that needs them. 4) If possible, run the orchestration in a sandbox or with the agent limited to user-invoked mode until you confirm behavior. 5) Treat any install commands that pull from arbitrary GitHub URLs or run npx against unknown packages as higher risk — prefer vetted sources or local inspection before installing. Reviewing the referenced skills is the critical step to assess actual risk.
功能分析
Type: OpenClaw Skill
Name: production-readiness
Version: 1.0.0
The OpenClaw AgentSkills skill bundle for 'production-readiness' is benign. It functions as a meta-skill, orchestrating other skills and agents for a comprehensive readiness review. The `SKILL.md` contains instructions for the AI agent to delegate to and follow instructions from other skills, which is a core function of an orchestrator and not an attempt at prompt injection by this skill itself. Installation commands in `README.md` involve `npx add` from a GitHub URL, which is a standard, albeit supply-chain-dependent, method for skill installation, and the URL points to the skill itself. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found.
能力评估
Purpose & Capability
Name/description describe an orchestration/meta-skill. The skill is instruction-only, requests no binaries, env vars, or config paths — which is proportionate for a coordinator that defers work to specialized skills.
Instruction Scope
Runtime instructions explicitly tell the agent to "read the target skill first, follow its instructions, then return results" for many named skills/agents. That is expected for a meta-skill, but it grants this skill an implicit ability to invoke arbitrary logic from those other skills. The SKILL.md does not constrain or validate what delegated skills may do (network calls, credential access, file reads/writes), so the effective runtime scope depends entirely on the referenced skills.
Install Mechanism
There is no install spec in the registry entry (instruction-only), which is low-risk. README contains example npx commands and a GitHub tree URL, but the skill's source/homepage are unknown; those install suggestions point to an external repo (unverified). Lack of provenance is a caution: follow-up installs could pull code from untrusted locations.
Credentials
This skill declares no required environment variables or credentials, which is appropriate. However, because it delegates to many other skills, those downstream skills may require credentials or secrets; the meta-skill does not enumerate or warn about them.
Persistence & Privilege
always:false and default model-invocation are benign. The skill does not request persistent presence or changes to other skills' configs. The main risk is that autonomous invocation will allow the agent to call delegated skills (normal behavior), increasing blast radius if those skills are untrusted.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install production-readiness - 安装完成后，直接呼叫该 Skill 的名称或使用
/production-readiness触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of the production-readiness meta-skill.
- Coordinates logging, monitoring, error handling, performance, security, deployment, and testing checks into a unified production readiness review.
- Delegates to specialized skills and agents for each operational concern; synthesizes a single go/no-go report.
- Provides detailed orchestration flow, checklist, and maturity model for evaluating service readiness.
- Designed for use before first deploy, major releases, quarterly reviews, after incidents, and during ownership transfers.
- Includes routing table for related skills and commands.
元数据
常见问题
Production Readiness 是什么？
Meta-skill that orchestrates logging, monitoring, error handling, performance, security, deployment, and testing skills to ensure a service is fully production-ready before launch. Use before first deploy, major releases, quarterly reviews, or after incidents. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 898 次。
如何安装 Production Readiness？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install production-readiness」即可一键安装，无需额外配置。
Production Readiness 是免费的吗？
是的，Production Readiness 完全免费（开源免费），可自由下载、安装和使用。
Production Readiness 支持哪些平台？
Production Readiness 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Production Readiness？
由 wpank（@wpank）开发并维护，当前版本 v1.0.0。
推荐 Skills