An opinionated Expo + Supabase + EAS workflow for shipping a small app to both stores; schema/RLS design, auth, native modules, universal links, and store submission, in the order that avoids cloud-builder-only failures.
DBA-grade migration safety: expand-contract plans, lock-behavior analysis, batched backfills, forward+rollback and integrity checks (Postgres/MySQL · Prisma/Rails/Django)
Supabase RLS Security Auditor assesses and audits Supabase apps across RLS, Auth/IAM, data security, APIs, Edge Functions, storage, secrets, third-party integrations, governance, logging, and security operations. Built for founders, vibe-coded apps, SaaS teams, and builders preparing to launch. Returns prioritized findings, exploit paths, safe SQL/architecture fixes, regression tests, and launch-blocker guidance.
This skill is based on practical Power Platform delivery patterns for safely creating, reviewing, and modifying Power Automate cloud-flow JSON in Dataverse solution exports. It focuses on issues that often break real client automations: runAfter paths, renamed action references, connection references, hardcoded values, TRY/CATCH logging, import safety, validation, and rollback notes.
Catch dangerous Postgres DDL before merge. Paste SQL or ORM migration files and get a GREEN/AMBER/RED verdict, 0-100 score, exact findings, and a merge-gate checklist. Free local Download; no API key or database connection.
DriftGuard analyzes a repository for dependency and API upgrade impact, identifies affected code, applies targeted migration changes, and validates the result with tests. It returns a structured migration result with changed files, diff, migration report, test results, and PR-ready summary. Runs with Claude Agent in Capafy and supports terminal/CI workflows.
Turns a user story or ticket into a verified, minimal test suite. Derives every case from a formal technique (boundary value analysis, equivalence partitioning, decision tables), reduces configuration combinations pairwise, and runs a deterministic script to prove coverage instead of just listing cases. Includes a security pass built from real OWASP findings and Playwright export.
Turns vague software ideas into clear, implementation-ready specifications for AI coding agents, asking only the questions that matter and clearly separating your requirements from AI assumptions and engineering recommendations.