Guardrails, skills, loops, hooks & review agents for database + website builders on Claude Code (Next.js + Supabase).
Agent
Reviews Next.js route handlers and server actions - input validation, status codes, error handling, auth checks, rate limiting, response shape. Use when API endpoints, server actions, or webhooks change.
Agent
Reviews Postgres/Supabase schema, migrations, queries, and RLS for safety and performance. Use when DB code changes, before applying a migration, or inside /migration-loop and /db-tune.
Agent
Reviews a change for performance - N+1 queries, missing indexes, slow queries, client bundle size, Core Web Vitals, caching/revalidation, render performance. Use when data access, rendering, or dependencies change.
Agent
Security-focused review of a diff - secrets, injection, auth/authz, RLS gaps, SSRF, XSS/CSRF, OWASP Top 10. Use after changes touching auth, input handling, API routes, payments, or data access.
Agent
Reviews test quality and coverage - behavioral vs implementation tests, edge cases, regression tests for bug fixes, flakiness, and whether the change is actually tested. Use after code or test changes.