mobile-app

Monitors a GitHub pull request for CI failures and review comments (including CodeRabbit AI reviews), investigates each issue, and makes fixes when appropriate. Use this skill when the user asks to "autofix PR", "monitor PR", "watch PR", "fix PR issues", or "check PR comments". Also use when the user mentions CodeRabbit, code review comments, or CI failures on a PR.

Audits codebases for common security vulnerabilities that AI coding assistants introduce in "vibe-coded" applications. Checks for exposed API keys, broken access control (Supabase RLS, Firebase rules), missing auth validation, client-side trust issues, insecure payment flows, and more. Use this skill whenever the user asks about security, wants a code review, mentions "vibe coding", or when you're writing or reviewing code that handles authentication, payments, database access, API keys, secrets, or user data — even if they don't explicitly mention security. Also trigger when the user says things like "is this safe?", "check my code", "audit this", "review for vulnerabilities", or "can someone hack this?".