saas-launch-checklist/SKILL.md
Use when auditing launch readiness for a SaaS product, doing a pre-launch review, or checking what is missing before going live. Produces a categorised checklist with status for each item and clear distinction between must-have blockers and post-launch additions.
npx skillsauth add paulund/skills saas-launch-checklistInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
references/launch-readiness.md for the full checklist.Done, In Progress, Needed, or Optional. Mark blockers clearly.Not everything needs to be done before launch. Use these tiers to guide prioritisation:
These are blockers. Do not launch without them.
Important but not blockers. Ship these in the first 2-4 weeks post-launch.
These are real features but rarely needed on day one. Add when the user base demands them.
These answers determine which items are blockers vs optional:
Present the audit as a table or checklist grouped by priority tier:
## Must-have before launch
| Item | Status | Notes |
| --- | --- | --- |
| User signup and login | Done | |
| Email/password auth | Done | |
| OAuth (Google/GitHub) | Needed | User expects it |
| Password reset flow | Done | |
| Stripe integration | In Progress | Payment works, webhooks not set up |
| Failed payment handling | Needed | Blocker |
| Welcome email | Needed | Blocker |
| Terms of Service | Done | |
| Privacy Policy | Needed | Blocker |
| Error monitoring (Sentry) | Not started | Blocker |
## Blockers summary
Before launch, complete:
1. Set up Stripe webhooks for failed payment handling
2. Write and publish Privacy Policy
3. Set up Sentry (or equivalent) error monitoring
4. Add welcome email to signup flow
| Topic | Reference | Load When |
| ----- | --------- | --------- |
| Launch Readiness Checklist | references/launch-readiness.md | Always |
development
Use when the user wants to run the project's lint + types + build sequence as a gate before pushing, opening a PR, or merging. Invoked by chained dev skills between phases. Trigger phrases - "/quality-gate", "run the quality gate", "check it builds".
tools
Use when the user wants to verify a PR's feature works at runtime by booting the dev server, exercising the affected UI via Chrome DevTools MCP, and posting a screenshot summary back to the PR. Idempotent — skips if `verified` or `verify-failed` is already on the PR. Trigger phrases - "/pr-verify", "verify this PR", "runtime check the pr".
testing
Use when the user wants a security-focused review pass on a PR with findings actioned as commits on the same branch. Trigger phrases - "/pr-security-review", "security review and fix".
testing
Use when the user wants to open a pull request for an already-pushed branch that implements a specific issue. Idempotent — returns the existing PR if one is already open for the branch. Trigger phrases - "/pr-open", "open the pr", "create pr for this branch".