RookieNaraku

Security & test-regression review for AI-assisted coding (Vibe Coding). Triggers on "/safe_review", "safe review", "安全审查", "回归测试", "越权检查", or after any change touching auth/permissions/data-ownership/payment/business-state logic. Prioritizes P0 risks (auth, authorization, data isolation, money, core business flow) over blanket coverage; designs normal/boundary/exception test matrices, builds a repeatable automated regression net, verifies tests are real via deliberate-break-then-restore, and performs non-destructive attacker-perspective checks on backend endpoints. Always output the final report in the exact 10-section Chinese template defined in SKILL.md — never a different structure, section count, or language.