Borrowing it
Nothing to install: this file belongs to tiagosilva07/zyrax-guard. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/tiagosilva07/zyrax-guard/main/.agents/skills/production-readiness/SKILL.mdgit clone --depth 1 https://github.com/tiagosilva07/zyrax-guardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tiagosilva07/zyrax-guard/production-readiness)<a href="https://agentmods.dev/skills/tiagosilva07/zyrax-guard/production-readiness"><img src="https://agentmods.dev/badge/skills/tiagosilva07/zyrax-guard/production-readiness/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tiagosilva07/zyrax-guard/production-readiness"><img src="https://agentmods.dev/badge/skills/tiagosilva07/zyrax-guard/production-readiness.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.00612 |
| Opus 5 | $0.00036 | $0.00306 |
| Sonnet 5 | $0.00014 | $0.00122 |
| Haiku 4.5 | $0.00007 | $0.00061 |
Grade A, and why
production-readiness scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Production-readiness gate
Run this before code reaches real users. Anything unchecked is a conscious risk someone has to accept — not an oversight.
Correctness
- Tests cover the new logic, including the failure paths — and they pass.
- Build is clean (no warnings treated as acceptable noise).
- Edge cases handled: empty, null/nil, very large, concurrent, boundary values.
- No debug code, dead code, or commented-out blocks left behind.
Error handling
- Errors are handled or propagated with context — never silently swallowed.
- User-facing failures are graceful and recoverable; no raw stack traces shown.
- External calls (DB, network, third party) have timeouts and a failure path.
- Retries are bounded and idempotent where used.
Security
- No secrets in code, logs, or client bundles.
- All external input validated; queries parameterized.
- AuthN/AuthZ checks on every protected path.
- (If sensitive surface) ran the
security-auditor.
Observability
- Structured logs at the right level — enough to debug an incident, not so much they leak data or drown signal.
- Key metrics emitted (latency, error rate, throughput on hot paths).
- Health/readiness endpoints exist (services).
Performance & scale
- No obvious N+1 queries or unbounded loops on hot paths.
- Pagination/limits on anything that can grow unbounded.
- (If hot path under load) baseline measured; see the
perf-optimizer.
Operability
- Config via env/secret manager, not hardcoded.
- Graceful shutdown handled.
- Rollback path exists and is known.
- DB migrations are backward-compatible (can roll back without data loss).
Stack quick-hits
- Go:
go vet+-raceclean on concurrent code; contexts plumbed through; errors wrapped. - React/TS: loading/empty/error states present; no
anywithout justification; bundle size sane. - C#/.NET: no sync-over-async;
IDisposablehonored; nullable warnings addressed.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 60 lines · 71 tokens per session scan A 3581999cff99
production-readiness is a skill published in the GitHub repository tiagosilva07/zyrax-guard (2 stars, last pushed 1mo ago), licensed MIT. It adds 71 tokens to every session and 612 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agent-safety
Use when bounding an LLM agent that already runs — scoping its task domain, gating tools to least privilege, defending against prompt injection in untrusted web/email/RAG text, requiring human approval on irreversible actions, capping runtime and cost, or triaging what it already did. NOT building the loop, tools, or…
clawseccheck
Free, local security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, log files, agent session logs, and installed skills — read-only against your OpenClaw setup, plus a bounded host-security scan; writes only its own local report/history (removable with --purge). Reports the most…
detecting-dependency-confusion
Detect and prevent public-over-private name resolution in npm, PyPI, and Maven.
diet-remove
Remove a dependency identified by uzomuzo diet — analysis + issue (default) or direct PR.
diet-assess-risk
Deep-dive security risk analysis for a dependency flagged by uzomuzo diet.
diet-evaluate-removal
Data-driven deep evaluation of whether a dependency is worth removing.