Audit and Review Skill

Purpose

The reviewer conducts a Gate 3 audit on an entire feature branch or completed task. Unlike the validate skill, which cares about functional requirements and basic unit/lint validation, this skill answers the critical engineering question: "Is this feature truly safe to deploy to production?"

Gate 3: Production Readiness Audit

1. The Configuration Check

• Have new environment variables been introduced?
• Are they documented in a .env.example or equivalent config schema?
• Are environment configurations checked at service startup (fail-fast principle)?

2. The Dependency Lock Check

• Has the feature introduced new libraries?
• If so, did it write them permanently to the respective dependency lockfile (e.g. requirements.txt, package.json, go.mod)?
• Are they broadly accepted and actively maintained libraries, or arbitrary/fringe packages?