Menu
Use after deployments to verify health endpoints, run API smoke tests, and confirm release integrity with CLI checks.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Walk the B1-B15 AI-to-AI blind-spot catalog systematically. Use during the audit pipeline AFTER hard-stops and Tambon hunt and BEFORE the 13 domain audits. Output: PRESENT / NOT PRESENT for each B-class with evidence. Findings flow into the appropriate domains.
Standardize remediation decisions, baseline-policy entries, and legal-review banners for accepted, deferred, or policy-blocked audit findings.
Audit the security domain - auth, authz, secrets, transport, sensitive data exposure, dependency CVEs. Run as part of /audit Phase E.
Audit the architecture and code quality domain - module boundaries, abstraction layers, code organization, naming, documentation. Run as part of /audit Phase E.
Audit the database and data layer - schema design, query patterns, migrations, indexing, RLS, soft-delete, transactions. Run as part of /audit Phase E.
Audit the infra and DevOps domain - CI/CD, deployment, IaC, secrets management, environments, logging, observability. Run as part of /audit Phase E.
| name | deploy-verify |
| description | Use after deployments to verify health endpoints, run API smoke tests, and confirm release integrity with CLI checks. |
CLI-based deployment verification without browser dependencies. Use this after deploying any service.
Determine which service was deployed and its verification endpoints:
# HTTP health check
curl -s -o /dev/null -w "%{http_code}" <URL>/health
# Full response with timing
curl -s -w "\n---\nHTTP %{http_code} | Time: %{time_total}s\n" <URL>/health
# Multiple endpoints
for endpoint in /health /api/status /api/version; do
echo "$endpoint: $(curl -s -o /dev/null -w '%{http_code}' <URL>$endpoint)"
done
Test critical endpoints with actual requests:
# GET endpoint
curl -s <URL>/api/endpoint | head -c 500
# POST with auth
curl -s -X POST <URL>/api/endpoint \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"test": true}'
# Check response shape
curl -s <URL>/api/endpoint | python -m json.tool | head -20
# Container running-
docker ps | grep <service>
# Recent logs (errors-)
docker logs <container> --tail 50 2>&1 | grep -i error
# Container health
docker inspect --format='{{.State.Health.Status}}' <container>
# Check for errors in last 10 minutes
docker logs <container> --since 10m 2>&1 | grep -iE "error|fatal|exception"
# Supabase: check edge function logs
# Check Supabase dashboard -> Edge Functions -> Logs
# Server logs
ssh user@server 'journalctl -u <service> --since "10 minutes ago" | grep -i error'
Output a verification summary:
DEPLOYMENT VERIFICATION REPORT
==============================
Service: <name>
Deployed at: <timestamp>
URL: <url>
Health Check: PASS/FAIL (HTTP <code>, <time>ms)
API Endpoints:
- GET /api/endpoint: PASS (HTTP 200)
- POST /api/endpoint: PASS (HTTP 201)
Container Status: Running (uptime: <time>)
Error Log: 0 errors in last 10 minutes
Overall: PASS/FAIL