Menú
Use after deployments to verify health endpoints, run API smoke tests, and confirm release integrity with CLI checks.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Walk the B1-B15 AI-to-AI blind-spot catalog systematically. Use during the audit pipeline AFTER hard-stops and Tambon hunt and BEFORE the 13 domain audits. Output: PRESENT / NOT PRESENT for each B-class with evidence. Findings flow into the appropriate domains.
Standardize remediation decisions, baseline-policy entries, and legal-review banners for accepted, deferred, or policy-blocked audit findings.
Audit the security domain - auth, authz, secrets, transport, sensitive data exposure, dependency CVEs. Run as part of /audit Phase E.
Audit the architecture and code quality domain - module boundaries, abstraction layers, code organization, naming, documentation. Run as part of /audit Phase E.
Audit the database and data layer - schema design, query patterns, migrations, indexing, RLS, soft-delete, transactions. Run as part of /audit Phase E.
Audit the infra and DevOps domain - CI/CD, deployment, IaC, secrets management, environments, logging, observability. Run as part of /audit Phase E.
Basado en la clasificación ocupacional SOC
| name | deploy-verify |
| description | Use after deployments to verify health endpoints, run API smoke tests, and confirm release integrity with CLI checks. |
CLI-based deployment verification without browser dependencies. Use this after deploying any service.
Determine which service was deployed and its verification endpoints:
# HTTP health check
curl -s -o /dev/null -w "%{http_code}" <URL>/health
# Full response with timing
curl -s -w "\n---\nHTTP %{http_code} | Time: %{time_total}s\n" <URL>/health
# Multiple endpoints
for endpoint in /health /api/status /api/version; do
echo "$endpoint: $(curl -s -o /dev/null -w '%{http_code}' <URL>$endpoint)"
done
Test critical endpoints with actual requests:
# GET endpoint
curl -s <URL>/api/endpoint | head -c 500
# POST with auth
curl -s -X POST <URL>/api/endpoint \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"test": true}'
# Check response shape
curl -s <URL>/api/endpoint | python -m json.tool | head -20
# Container running-
docker ps | grep <service>
# Recent logs (errors-)
docker logs <container> --tail 50 2>&1 | grep -i error
# Container health
docker inspect --format='{{.State.Health.Status}}' <container>
# Check for errors in last 10 minutes
docker logs <container> --since 10m 2>&1 | grep -iE "error|fatal|exception"
# Supabase: check edge function logs
# Check Supabase dashboard -> Edge Functions -> Logs
# Server logs
ssh user@server 'journalctl -u <service> --since "10 minutes ago" | grep -i error'
Output a verification summary:
DEPLOYMENT VERIFICATION REPORT
==============================
Service: <name>
Deployed at: <timestamp>
URL: <url>
Health Check: PASS/FAIL (HTTP <code>, <time>ms)
API Endpoints:
- GET /api/endpoint: PASS (HTTP 200)
- POST /api/endpoint: PASS (HTTP 201)
Container Status: Running (uptime: <time>)
Error Log: 0 errors in last 10 minutes
Overall: PASS/FAIL