Reviews code changes for type safety, security vulnerabilities, error handling, and performance issues in TypeScript/Next.js projects. Checks for SQL injection, XSS, missing null checks, N+1 queries, and convention violations. Use when reviewing a pull request, checking code changes, reviewing a diff, doing a pre-merge review, or when the implement workflow reaches the review step.
Runs build checks, validates environment variables, verifies database migration status, and checks Stripe webhook configuration for Vercel-hosted Next.js projects. Use before deploying, shipping, releasing, or when the user mentions going to production.
Generates failing tests before implementation using test-driven development (TDD) with Vitest in TypeScript/Next.js projects. Writes unit test stubs covering happy path, edge cases, and error conditions, then confirms they fail. Use when writing tests first, starting TDD, doing red-green-refactor, verifying test coverage after refactoring, or when the implement workflow reaches the test step.
Hooks-based Glacier board sync. Auto-fires on branch creation, PR open, and PR merge via Claude Code hooks. Only activates when GLACIER_ENABLED=true, GLACIER_WORKSPACE_ID, and GLACIER_PROJECT_ID are set. Skips silently if not configured. Supports verbose mode for demo presentations.
Enforces Black Bear Studio's database safety rules. Auto-invoke on any schema file change (schema.ts, schema.prisma, migrations folder) or when user mentions migration, schema change, ALTER TABLE, drizzle-kit, or prisma migrate.
Scans staged or committed changes for leaked secrets (Stripe keys, .env files, API tokens, private keys). Auto-invoke before commit, before PR creation, or when user mentions secret, leak, credential, or API key.
Enforces Stripe integration best practices for webhook handling, idempotency, signature verification, and test vs live mode safety. Auto-invoke on any file touching Stripe webhooks, subscriptions, payments, checkout, or when user mentions Stripe, webhooks, webhook secret, idempotency, or subscription lifecycle.