Agent skill · software engineering · jeremylongshore
attio-prod-checklist
Run an evidence-based production-readiness review for an Attio integration across identity, scopes, data ownership, retries, webhooks, observability, rollback, and support. Use when preparing to enable production Attio traffic. Trigger with "Attio production checklist", "Attio go-live", or "review Attio release".
Why this skill is useful
Adds a comprehensive production readiness checklist with executable scripts for Attio API integrations that aren't in public docs.
What it needs
Requires curl installed locally. Requires attio account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Attio Production Readiness Review Overview This skill produces a release decision from repository and operational evidence. A checked box without a receipt is unresolved, not complete. Prerequisites Exact artifact, environment, workspace, and release owner Endpoint inventory with methods and required scopes Data ownership, retention, and deletion policy Monitoring, incident, rollback, and support paths Tool Discipline Use Read, Glob, and Grep to inspect auth, mappings, tests, workflows, observability, and rollback code. Use WebFetch only for current official Attio documentation. Use Write or Edit only to remediate a named gap with verification. Current Contract Authentication must match the tenancy model and use endpoint-derived least privilege. Record and entry identity, owned fields, and destructive boundaries must be explicit. Retries must honor Retry-After and exclude permanent request failures. Webhook receivers need raw-body HMAC verification and idempotent processing. Pagination mode must be confirmed endpoint by endpoint. Authentication Verify secret location, workspace or tenant binding, scopes, rotation owner, revocation procedure, and absence from logs and artifacts. Use Bearer authentication for REST requests. Instructions 1. Bind the review to the exact artifact, environment, workspace, and endpoint inventory. 2. Verify contract tests, schema discovery, field ownership, identity, and pagination termination. 3. Verify credential storage, endpoint scopes, tenant isolation, rotation, and redaction. 4. Verify timeouts, bounded retries, read/write traffic controls, and 429 handling. 5. For webhooks, verify HTTPS, raw-body signature checks, idempotency keys, quick acknowledgement, and replay-safe workers. 6. Exercise read-only smoke, approved canary, alert path, rollback, and recovery evidence. 7. Record PASS, FAIL, or explicitly accepted risk for every item and name the approver. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/attio-prod-checklist