Agent skill · Security

launchworthy

Production readiness audit that turns a demo into a real product. Built for apps shipped fast with AI coding tools (Lovable, Bolt, v0, Cursor, Claude Code). Auto-detects your stack and audits 5 domains (Frontend, Backend & Data, Auth & Security, Infrastructure, Operations), then produces a scored scorecard and a prioritized punch list with exact file paths and copy-paste fixes. Use before you go live, or on an app that is already live, when the user says "harden this", "is this production ready", "is this safe to launch", "will this survive real users", "audit my app", "turn this into a produc

Wunderlandmediagithub.com/WunderlandmediaGitHub ↗
claude-codeMIT
Install
npx skills add Wunderlandmedia/launchworthy --skill launchworthy --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 15
SKILL.md size: 13 KB
Bundled scripts: none
Path: skills/launchworthy/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 93
Language: Python

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# launchworthy A production readiness audit for apps built fast with AI. If you shipped something with Lovable, Bolt, v0, Cursor, or Claude Code and it works on your screen, this finds the gaps between "it works for me" and "real users are paying for this and nothing is on fire." It produces a scored scorecard and a prioritized punch list with specific file paths and exact fixes. The framework is stack-agnostic. It auto-detects your framework and backend and adapts every check to what you actually use. ## Who this is for AI coding tools are great at making things that work in a demo. They are quiet about what only bites you in production: a Supabase table with row-level security turned off, an API key baked into your frontend bundle, no rate limit on the endpoint that calls a paid AI model, no backups, no idea whether a second user can read the first user's data. This audit surfaces exactly that, before a stranger finds it for you. ## The 5 domains The audit walks five domains. Each contains concrete checks with severity tags. The full check list lives in [references/checklist.md](references/checklist.md). | # | Domain | The question it answers | |---|---|---| | 1 | Frontend & Expe

What's inside
Steps it walks through
  1. Who this is for
  2. The 5 domains
  3. Instructions
  4. Step 1: Detect the Stack and Assess Scope
  5. Step 2: Run the Audit
  6. Step 3: Score Each Domain
  7. Step 4: Build the Punch List
  8. Step 5: Write the Report
  9. Step 6: Present the Scorecard and Reframe
  10. Step 7: Run the Evidence Interview
  11. Step 8: Offer to Apply the Safe Fixes
  12. Limitations
Ships with 14 files
  • references/checklist.md
  • references/evidence-interview.md
  • references/fixes/auth-ownership.md
  • references/fixes/error-tracking.md
  • references/fixes/firebase-rules.md
  • references/fixes/input-validation.md
  • references/fixes/rate-limiting.md
  • references/fixes/security-headers.md
  • references/fixes/supabase-rls.md
  • references/fixes/uptime-monitoring.md
  • references/fixes/webhooks.md
  • references/presentation.md
  • references/rationalizations.md
  • references/report-template.md
About this skill
What does the launchworthy skill do?

Production readiness audit that turns a demo into a real product. Built for apps shipped fast with AI coding tools (Lovable, Bolt, v0, Cursor, Claude Code). Auto-detects your stack and audits 5 domains (Frontend, Backend & Data, Auth & Security, Infrastructure, Operations), then produces a scored scorecard and a prioritized punch list with exact file paths and copy-paste fixes. Use before you go live, or on an app that is already live, when the user says "harden this", "is this production ready", "is this safe to launch", "will this survive real users", "audit my app", "turn this into a produc

How do I install it?

Run `npx skills add Wunderlandmedia/launchworthy --skill launchworthy --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From Wunderlandmedia/launchworthy, a repository with 93 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going