Agent skill · software engineering · jeremylongshore
clerk-prod-checklist
Production readiness checklist for Clerk deployment.
Why this skill is useful
Adds a validation script for production readiness checks specific to Clerk integration that the AI wouldn't reliably generate on its own.
What it needs
Requires npm installed locally. Requires clerk account access. About 4k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Clerk Production Checklist Overview Complete checklist to ensure your Clerk integration is production-ready. Covers environment config, security hardening, monitoring, error handling, and compliance. Prerequisites Clerk integration working in development Production environment and domain configured CI/CD pipeline ready Instructions Step 1: Environment Configuration Checklist Check Status Action ------- -------- -------- Using pklive keys [ ] Switch from test to live keys CLERKSECRETKEY is sklive [ ] Never use test keys in production .env.local in .gitignore [ ] Prevent accidental secret commits CLERKWEBHOOKSECRET set [ ] Required for webhook verification Production domain in Clerk Dashboard [ ] Dashboard > Domains Sign-in/sign-up URLs configured [ ] Set NEXTPUBLICCLERKSIGNINURL etc. Step 2: Validation Script Run with: Step 3: Security Checklist Check Status Action ------- -------- -------- Middleware protects all routes [ ] Verify non-public routes require auth API routes check userId [ ] Return 401 if userId is null Webhook signatures verified [ ] Use svix library for verification CORS configured correctly [ ] Only allow production domain Rate limiting on sensitive endpoints [ ] Use @upstash/ratelimit or similar CSP headers set [ ] Add Clerk domains to Content-Security-Policy No secret keys in client code [ ] CLERKSECRETKEY never exposed Step 4: Monitoring Checklist Check Status Action ------- -------- -------- Health check endpoint [ ] /api/health monitoring Clerk API Error tracking (Sentry) [ ] Clerk user context in error reports Auth event logging [ ] Log sign-in, sign-out, permission denied Webhook monitoring [ ] Alert on failed webhook deliveries Uptime monitoring [ ] External monitor hitting health endpoint Step 5: Error Handling Checklist Check Status Action ------- -------- -------- Custom error pages [ ] /not-found, /error pages handle auth errors Graceful auth failures [ ] Redirect to sign-in, don't show stack traces Webhook retry handling [ ] Idempotency …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/clerk-prod-checklist--0ca991