skills/full-cycle/SKILL.md
Composite: audit -> upgrade -> research -> plan -> swarm fix -> eval -> ship. The complete ProductionOS pipeline. Use when user says 'do everything', 'full cycle', 'end to end', or 'make it production-ready'.
npx skillsauth add ShaheerKhawaja/ProductionOS full-cycleInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
The nuclear option. Chains 7 skills into a complete audit-research-plan-fix-verify-ship pipeline. This is the most comprehensive ProductionOS composite skill -- it touches every layer of the codebase and produces a fully evaluated, reviewed, and shipped result.
Cost: High. Expect 30-90 minutes of agent time depending on codebase size. When to use: Major milestones, pre-launch readiness, end-of-sprint quality gates, or when the answer to "what needs work?" is "everything." When NOT to use: Quick fixes, single-file changes, debugging a specific bug. Use targeted skills instead.
security-audit -> production-upgrade -> deep-research -> plan-ceo-review
| | | |
v v v v
AUDIT.md UPGRADE.md RESEARCH.md CEO-REVIEW.md
| | | |
+------ Phase 1: Assess -----------+ +-- Phase 2: Plan -+
|
v
auto-swarm ---------> self-eval ---------> ship
| | |
v v v
SWARM-RESULT.md EVAL.md PR created
| |
+-- Phase 3: Fix --+--- Phase 4: Ship ---+
| Parameter | Values | Default | Description |
|-----------|--------|---------|-------------|
| target | path, scope | . | What to process |
| depth | medium, deep, ultra | deep | Swarm depth for fix phase |
Invokes: /security-audit with framework=all, scope=full
Runs the full 7-domain security scan. Produces .productionos/AUDIT-SECURITY.md.
Escalation: If CRITICAL findings > 0, the full-cycle continues but flags them as MUST-FIX items for the swarm phase. Unlike audit-and-fix, full-cycle does not halt on CRITICALs -- it feeds them into the fix pipeline.
Invokes: /production-upgrade
Full codebase quality audit beyond security: code style, error handling, test coverage, dependency health, API design, performance, maintainability. Produces .productionos/UPGRADE.md.
Phase 1 output: Combined issue list from security audit + production upgrade, deduplicated and priority-ranked.
Invokes: /deep-research
Researches solutions for the top issues found in Phase 1. Cross-references ~/repos/ for existing implementations, checks library docs via context7, identifies best-practice patterns. Produces .productionos/RESEARCH.md.
Invokes: /plan-ceo-review
Applies founder lens to the research findings. Identifies the 10-star fix strategy, scope expansions worth taking, and priority ordering. Produces .productionos/CEO-REVIEW.md.
Phase 2 output: Prioritized fix plan with CEO-approved scope, ready for automated execution.
Invokes: /auto-swarm --mode=fix
Parallel agent swarm that executes the fix plan from Phase 2. Each agent targets one issue or improvement. Swarm operates with quality gates -- each fix must pass its own self-check before merging.
Swarm configuration:
{depth} parameter (default: deep)Produces: .productionos/SWARM-RESULT.md
Estimated effort by depth: | Depth | Agents | Time | Coverage | |-------|--------|------|----------| | medium | 5-15 | 15-30 min | Top priority issues | | deep | 15-50 | 30-60 min | All HIGH+ issues | | ultra | 50-100+ | 60-90 min | All issues including LOW |
Invokes: /self-eval session
Evaluates the entire session: all changes made across all phases. Scores quality, necessity, correctness, completeness. This is the final quality gate before shipping.
Quality gate: Score >= 8.0 required. If < 8.0 after 3 self-heal loops, BLOCK shipping and report remaining issues.
Invokes: /ship
Ships the result: syncs with base branch, runs tests, bumps version, updates changelog, commits, pushes, creates PR.
Pre-ship gate: Only runs if Step 6 scored >= 8.0 AND tests pass.
The full-cycle aborts (does not ship) when:
| Condition | Aborts At | Recovery | |-----------|-----------|----------| | Self-eval < 6.0 after 3 loops | Step 6 | Fix manually, re-run | | Tests fail after swarm fixes | Step 5 | Rollback, investigate | | Merge conflicts with base | Step 7 | Resolve conflicts, re-run Step 7 | | > 3 CRITICAL unfixed after swarm | Step 5 | Manual CRITICAL fix required |
Final composite report written to .productionos/FULL-CYCLE.md:
# Full Cycle Report
## Summary
- **Security Posture:** X/10 (before) -> Y/10 (after)
- **Code Quality:** X/10 (before) -> Y/10 (after)
- **Issues Found:** N total
- **Issues Fixed:** M fixed, K remaining
- **Self-Eval Score:** X/10
- **Ship Status:** SHIPPED (PR #{N}) | BLOCKED
## Phase Results
| Phase | Step | Status | Output |
|-------|------|--------|--------|
| Assess | Security Audit | DONE | N findings |
| Assess | Production Upgrade | DONE | M opportunities |
| Plan | Deep Research | DONE | K solutions found |
| Plan | CEO Review | DONE | Scope approved |
| Fix | Auto-Swarm | DONE | J fixes applied |
| Ship | Self-Eval | PASS/FAIL | X/10 |
| Ship | Ship | DONE/BLOCKED | PR #{N} |
## Before/After Comparison
| Metric | Before | After | Delta |
|--------|--------|-------|-------|
| Security score | X | Y | +Z |
| Test coverage | X% | Y% | +Z% |
| Open issues | N | M | -K |
## Remaining Items
{issues not addressed in this cycle}
Full cycle completed: {timestamp} | Duration: {minutes}m
| Codebase Size | Estimated Duration | Agent-Minutes | Recommended Depth | |---------------|-------------------|---------------|-------------------| | Small (< 10K LOC) | 15-25 min | ~50 | deep | | Medium (10-50K LOC) | 30-50 min | ~150 | deep | | Large (50-200K LOC) | 45-75 min | ~300 | medium | | Huge (> 200K LOC) | 60-90 min | ~500 | medium |
/debug/ship-safe/audit-and-fix/research-and-plan/growth-audittools
Implementation planning workflow that turns approved ideas into dependency-aware execution plans.
development
Local RAG and Graph RAG over the SecondBrain wiki vault. Progressive context loading (hot cache -> index -> domain -> entity). Graph traversal via wikilink resolution. Use when agents need cross-project context, when answering questions that span multiple domains, or when building context for planning tasks. Triggers on: "wiki context", "cross-project context", "what do we know about", "check the wiki", "graph context", "/wiki-rag".
devops
UX improvement pipeline — creates user stories from UI guidelines, maps user journeys, identifies friction, dispatches fix agents. The user-experience equivalent of /production-upgrade.
development
Test-driven development workflow that writes failing tests first, implements minimally, and refactors safely.