vibe-gap-analysis
Cynical gap analysis comparing specs/architecture to actual implementation. Three modes from fast to exhaustive. Works with any project that has architecture docs and implementation code.
When to Use This Skill
- Before launching to production
- After a major refactor to verify nothing was lost
- When inheriting a codebase and need to assess completeness
- Periodic production readiness audits
- When stakeholders ask "how done are we?"
When NOT to Use This Skill
- Greenfield projects with no specs yet (write specs first)
- Simple bug fixes or feature additions
- Frontend-only or design-only reviews
Usage
/vibe-gap-analysis # Quick static (5 structural dimensions)
/vibe-gap-analysis --deep # Full 17-dimension audit with parallel agents
/vibe-gap-analysis --dim N # Single dimension deep-dive (1-17)
/vibe-gap-analysis --dim 1,4,9 # Multiple specific dimensions
Modes
Quick Static (default)
Fast, single-agent structural audit. No subagents dispatched.
- Read architecture/design docs in
docs/ or similar
- Read implementation code in
src/, internal/, lib/ etc.
- Compare implementation against architecture doc section by section
- Cover dimensions 1-5 (structural):
- Dim 1: Spec Compliance — check specs against implementation
- Dim 2: Backend Code Quality — test coverage, error handling, lint issues
- Dim 3: Frontend Completeness — UI components, routes, test coverage
- Dim 4: Deployment & Ops — deploy scripts, CI/CD, Docker, TLS
- Dim 5: Architecture Integrity — design pattern compliance, component boundaries
- Produce structured gap report: component, expected status, actual status, % complete, action items
- Save to
docs/plans/gap-analysis-$(date +%Y%m%d).md
- Commit with
docs: gap analysis $(date +%Y%m%d)
Deep (--deep)
Full 17-dimension audit using parallel subagents. Exhaustive production readiness assessment.
Dispatch parallel agents (model: sonnet) in 3 rounds:
Round 1 — Structural (5 agents):
- Dim 1: Spec Compliance
- Dim 2: Backend Code Quality
- Dim 3: Frontend Completeness
- Dim 4: Deployment & Ops
- Dim 5: Architecture Integrity
Round 2 — Runtime Execution (7 agents):
- Dim 6: Database Concurrency & Integrity
- Dim 7: Failure Cascades & Recovery
- Dim 8: E2E Data Flow
- Dim 9: Security & Input Validation
- Dim 10: Observability & Alerting
- Dim 11: Data Durability & Backup
- Dim 12: Cost/Resource Explosion Safeguards
Round 3 — Business & Product Maturity (5 agents):
- Dim 13: Performance & Load Testing
- Dim 14: Multi-Tenancy / User Isolation
- Dim 15: Privacy & Compliance (GDPR/CCPA)
- Dim 16: Supply Chain Security
- Dim 17: Operational Readiness
Each agent gets this prompt template:
You are auditing [project] for production readiness.
**Your dimension:** [Dimension N — Name]
**Scope:** [Description]
**Previous gap analysis:** [path, if exists]
Instructions:
1. Read all relevant source files for your dimension
2. For each finding: severity (CRITICAL/HIGH/MEDIUM/LOW), location (file:line), issue, fix, effort
3. Score your dimension 0-100
4. Return findings as structured markdown
Be extremely pedantic. Question everything. Assume this is a $100M ARR product.
After all rounds:
- Merge findings, deduplicate across dimensions
- Build production readiness scorecard (17 dimensions)
- Build findings-by-system-area cross-reference
- Build recommended action plan (phased)
- Save and commit
Single Dimension (--dim N)
Deep-dive into specific dimensions. One agent per requested dimension.
After completion, update only the audited dimensions in the existing gap analysis doc.
Dimension Reference
| # |
Dimension |
Type |
What to Audit |
| 1 |
Spec Compliance |
Structural |
Specs vs implementation |
| 2 |
Backend Code Quality |
Structural |
Tests, errors, lint, races |
| 3 |
Frontend Completeness |
Structural |
UI, routes, stores, tests |
| 4 |
Deployment & Ops |
Structural |
Deploy, CI/CD, Docker, TLS |
| 5 |
Architecture Integrity |
Structural |
Design patterns, boundaries |
| 6 |
Database Concurrency |
Runtime |
Transactions, locks, backups |
| 7 |
Failure Cascades |
Runtime |
Recovery, circuit breakers |
| 8 |
E2E Data Flow |
Runtime |
API contracts, idempotency |
| 9 |
Security |
Runtime |
Input validation, injection, secrets |
| 10 |
Observability |
Runtime |
Logging, alerting, metrics |
| 11 |
Data Durability |
Runtime |
RPO/RTO, backups, replication |
| 12 |
Cost/Resource Control |
Runtime |
Budgets, limits, rate limiting |
| 13 |
Performance & Load |
Business |
Timeouts, benchmarks, limits |
| 14 |
Multi-Tenancy |
Business |
User isolation, data scoping |
| 15 |
Privacy & Compliance |
Business |
GDPR, PII, consent, encryption |
| 16 |
Supply Chain |
Business |
Dep pinning, vuln scanning, builds |
| 17 |
Operational Readiness |
Business |
Runbooks, SLOs, incident response |
Output Format
All modes produce:
- Executive summary with total findings count
- Audit dimensions table with scores
- CRITICAL findings (full detail)
- HIGH findings (full detail)
- MEDIUM findings (one-line each)
- LOW findings (one-line each)
- Findings by system area (cross-reference)
- Recommended action plan (phased)
- Production readiness scorecard
1---2name: vibe-gap-analysis3description: Assesses production readiness or audits a codebase against its specs. Supports quick static mode, deep 17-dimension audit, or single-dimension focus.4---5
6# vibe-gap-analysis
7
8Cynical gap analysis comparing specs/architecture to actual implementation. Three modes from fast to exhaustive. Works with any project that has architecture docs and implementation code.
9
10## When to Use This Skill
11- Before launching to production
12- After a major refactor to verify nothing was lost
13- When inheriting a codebase and need to assess completeness
14- Periodic production readiness audits
15- When stakeholders ask "how done are we?"
16
17## When NOT to Use This Skill
18- Greenfield projects with no specs yet (write specs first)
19- Simple bug fixes or feature additions
20- Frontend-only or design-only reviews
21
22## Usage
23
24```
25/vibe-gap-analysis # Quick static (5 structural dimensions)
26/vibe-gap-analysis --deep # Full 17-dimension audit with parallel agents
27/vibe-gap-analysis --dim N # Single dimension deep-dive (1-17)
28/vibe-gap-analysis --dim 1,4,9 # Multiple specific dimensions
29```
30
31## Modes
32
33### Quick Static (default)
34
35Fast, single-agent structural audit. No subagents dispatched.
36
371. Read architecture/design docs in `docs/` or similar
382. Read implementation code in `src/`, `internal/`, `lib/` etc.
393. Compare implementation against architecture doc section by section
404. Cover dimensions 1-5 (structural):
41 - **Dim 1**: Spec Compliance — check specs against implementation
42 - **Dim 2**: Backend Code Quality — test coverage, error handling, lint issues
43 - **Dim 3**: Frontend Completeness — UI components, routes, test coverage
44 - **Dim 4**: Deployment & Ops — deploy scripts, CI/CD, Docker, TLS
45 - **Dim 5**: Architecture Integrity — design pattern compliance, component boundaries
465. Produce structured gap report: component, expected status, actual status, % complete, action items
476. Save to `docs/plans/gap-analysis-$(date +%Y%m%d).md`
487. Commit with `docs: gap analysis $(date +%Y%m%d)`
49
50### Deep (`--deep`)
51
52Full 17-dimension audit using parallel subagents. Exhaustive production readiness assessment.
53
54**Dispatch parallel agents** (model: sonnet) in 3 rounds:
55
56**Round 1 — Structural (5 agents):**
57- Dim 1: Spec Compliance
58- Dim 2: Backend Code Quality
59- Dim 3: Frontend Completeness
60- Dim 4: Deployment & Ops
61- Dim 5: Architecture Integrity
62
63**Round 2 — Runtime Execution (7 agents):**
64- Dim 6: Database Concurrency & Integrity
65- Dim 7: Failure Cascades & Recovery
66- Dim 8: E2E Data Flow
67- Dim 9: Security & Input Validation
68- Dim 10: Observability & Alerting
69- Dim 11: Data Durability & Backup
70- Dim 12: Cost/Resource Explosion Safeguards
71
72**Round 3 — Business & Product Maturity (5 agents):**
73- Dim 13: Performance & Load Testing
74- Dim 14: Multi-Tenancy / User Isolation
75- Dim 15: Privacy & Compliance (GDPR/CCPA)
76- Dim 16: Supply Chain Security
77- Dim 17: Operational Readiness
78
79Each agent gets this prompt template:
80```
81You are auditing [project] for production readiness.
82
83**Your dimension:** [Dimension N — Name]
84**Scope:** [Description]
85**Previous gap analysis:** [path, if exists]
86
87Instructions:
881. Read all relevant source files for your dimension
892. For each finding: severity (CRITICAL/HIGH/MEDIUM/LOW), location (file:line), issue, fix, effort
903. Score your dimension 0-100
914. Return findings as structured markdown
92
93Be extremely pedantic. Question everything. Assume this is a $100M ARR product.
94```
95
96After all rounds:
971. Merge findings, deduplicate across dimensions
982. Build production readiness scorecard (17 dimensions)
993. Build findings-by-system-area cross-reference
1004. Build recommended action plan (phased)
1015. Save and commit
102
103### Single Dimension (`--dim N`)
104
105Deep-dive into specific dimensions. One agent per requested dimension.
106
107After completion, update only the audited dimensions in the existing gap analysis doc.
108
109## Dimension Reference
110
111| # | Dimension | Type | What to Audit |
112|---|-----------|------|---------------|
113| 1 | Spec Compliance | Structural | Specs vs implementation |
114| 2 | Backend Code Quality | Structural | Tests, errors, lint, races |
115| 3 | Frontend Completeness | Structural | UI, routes, stores, tests |
116| 4 | Deployment & Ops | Structural | Deploy, CI/CD, Docker, TLS |
117| 5 | Architecture Integrity | Structural | Design patterns, boundaries |
118| 6 | Database Concurrency | Runtime | Transactions, locks, backups |
119| 7 | Failure Cascades | Runtime | Recovery, circuit breakers |
120| 8 | E2E Data Flow | Runtime | API contracts, idempotency |
121| 9 | Security | Runtime | Input validation, injection, secrets |
122| 10 | Observability | Runtime | Logging, alerting, metrics |
123| 11 | Data Durability | Runtime | RPO/RTO, backups, replication |
124| 12 | Cost/Resource Control | Runtime | Budgets, limits, rate limiting |
125| 13 | Performance & Load | Business | Timeouts, benchmarks, limits |
126| 14 | Multi-Tenancy | Business | User isolation, data scoping |
127| 15 | Privacy & Compliance | Business | GDPR, PII, consent, encryption |
128| 16 | Supply Chain | Business | Dep pinning, vuln scanning, builds |
129| 17 | Operational Readiness | Business | Runbooks, SLOs, incident response |
130
131## Output Format
132
133All modes produce:
134- Executive summary with total findings count
135- Audit dimensions table with scores
136- CRITICAL findings (full detail)
137- HIGH findings (full detail)
138- MEDIUM findings (one-line each)
139- LOW findings (one-line each)
140- Findings by system area (cross-reference)
141- Recommended action plan (phased)
142- Production readiness scorecard