skills/deployment-procedures/SKILL.md
Production deployment principles and decision-making. Safe deployment workflows, rollback strategies, and verification. Teaches thinking, not scripts.
npx skillsauth add ruanmalvao-web/lp deployment-proceduresInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Deployment principles and decision-making for safe production releases. Learn to THINK, not memorize scripts.
This skill teaches deployment principles, not bash scripts to copy.
What are you deploying?
│
├── Static site / JAMstack
│ └── Vercel, Netlify, Cloudflare Pages
│
├── Simple web app
│ ├── Managed → Railway, Render, Fly.io
│ └── Control → VPS + PM2/Docker
│
├── Microservices
│ └── Container orchestration
│
└── Serverless
└── Edge functions, Lambda
| Platform | Deployment Method | |----------|------------------| | Vercel/Netlify | Git push, auto-deploy | | Railway/Render | Git push or CLI | | VPS + PM2 | SSH + manual steps | | Docker | Image push + orchestration | | Kubernetes | kubectl apply |
| Category | What to Check | |----------|--------------| | Code Quality | Tests passing, linting clean, reviewed | | Build | Production build works, no warnings | | Environment | Env vars set, secrets current | | Safety | Backup done, rollback plan ready |
1. PREPARE
└── Verify code, build, env vars
2. BACKUP
└── Save current state before changing
3. DEPLOY
└── Execute with monitoring open
4. VERIFY
└── Health check, logs, key flows
5. CONFIRM or ROLLBACK
└── All good? Confirm. Issues? Rollback.
| Phase | Principle | |-------|-----------| | Prepare | Never deploy untested code | | Backup | Can't rollback without backup | | Deploy | Watch it happen, don't walk away | | Verify | Trust but verify | | Confirm | Have rollback trigger ready |
| Check | Why | |-------|-----| | Health endpoint | Service is running | | Error logs | No new errors | | Key user flows | Critical features work | | Performance | Response times acceptable |
| Symptom | Action | |---------|--------| | Service down | Rollback immediately | | Critical errors | Rollback | | Performance >50% degraded | Consider rollback | | Minor issues | Fix forward if quick |
| Platform | Rollback Method | |----------|----------------| | Vercel/Netlify | Redeploy previous commit | | Railway/Render | Rollback in dashboard | | VPS + PM2 | Restore backup, restart | | Docker | Previous image tag | | K8s | kubectl rollout undo |
| Strategy | How It Works | |----------|--------------| | Rolling | Replace instances one by one | | Blue-Green | Switch traffic between environments | | Canary | Gradual traffic shift |
| Scenario | Strategy | |----------|----------| | Standard release | Rolling | | High-risk change | Blue-green (easy rollback) | | Need validation | Canary (test with real traffic) |
| Check | Common Issues | |-------|--------------| | Logs | Errors, exceptions | | Resources | Disk full, memory | | Network | DNS, firewall | | Dependencies | Database, APIs |
| ❌ Don't | ✅ Do | |----------|-------| | Deploy on Friday | Deploy early in week | | Rush deployment | Follow the process | | Skip staging | Always test first | | Deploy without backup | Backup before deploy | | Walk away after deploy | Monitor for 15+ min | | Multiple changes at once | One change at a time |
Before deploying:
Remember: Every deployment is a risk. Minimize risk through preparation, not speed.
tools
No-code automation democratizes workflow building. Zapier and Make (formerly Integromat) let non-developers automate business processes without writing code. But no-code doesn't mean no-complexity - these platforms have their own patterns, pitfalls, and breaking points. This skill covers when to use which platform, how to build reliable automations, and when to graduate to code-based solutions. Key insight: Zapier optimizes for simplicity and integrations (7000+ apps), Make optimizes for power
tools
This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.
development
Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. When Claude needs to work with spreadsheets (.xlsx, .xlsm, .csv, .tsv, etc) for: (1) Creating new spreadsheets with formulas and formatting, (2) Reading or analyzing data, (3) Modify existing spreadsheets while preserving formulas, (4) Data analysis and visualization in spreadsheets, or (5) Recalculating formulas
tools
Publish articles to X/Twitter