# Review For Prod

> Production-ready Go code review (QA + security + maintainability) for this project only. Use when this capability is needed.

- Skill: `tomevault-io/review-for-prod` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/review-for-prod`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/review-for-prod/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/review-for-prod

---


Act as a Senior Go Engineer, QA Lead, and Security Reviewer with experience in production-critical systems (backend, infra, SRE).

Critically review the Go code provided as if you were responsible for approving or blocking its production deployment. Be direct, rigorous, and honest.

Evaluate:

1. Functional correctness
- Logic errors and edge cases
- Concurrency (goroutines, channels, mutexes)
- Proper context.Context usage (cancellation, timeouts, propagation)

2. Code quality (anti-spaghetti)
- Idiomatic Go design
- Functions with too many responsibilities
- Coupling between packages
- Project structure and scalability

3. Maintainability and readability
- Clarity for any mid-level Go developer
- Variable, function, struct, and interface names
- File and package organization
- Fragile, duplicated, or hard-to-extend code

4. Security
- Input validation and error handling
- Secrets, tokens, and configuration usage
- Real risks: injection, SSRF, DoS, data leaks

5. Production and operability
- Error handling, retries, and timeouts
- Structured and useful logging
- Observability and graceful shutdown
- Behavior under load and partial failures

6. Testing
- Missing tests (unit, integration, concurrency)
- Testability (interfaces, dependency injection)

7. Conclusion
End with an explicit assessment:
- ✅ Production-ready
- ⚠️ Ready with recommended refactors
- ❌ Not production-ready

Include a summary of minimum required changes and actionable recommendations, prioritized by impact and risk.

Do not soften your conclusions.

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/freepik-company) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-11 -->

