Audit a vibe-coded web app's security against a practical checklist — RLS/auth, exposed secrets, signups, storage, IDOR, webhooks, headers, XSS. Tuned for React/Vite + Supabase on Netlify/Vercel/Cloudflare, with adaptations for Firebase and custom Node/Next APIs.
Install
npx skills add flywheel-product/ai-build-skills --skill securitynpx skills add flywheel-product/ai-build-skills --skill security -a claude-code -gnpx skills add flywheel-product/ai-build-skills --skill security -a codex -ggemini skills install https://github.com/flywheel-product/ai-build-skills.git --path securitygh skill install flywheel-product/ai-build-skills securitygit clone --depth 1 https://github.com/flywheel-product/ai-build-skills /tmp/flywheel-product__ai-build-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/flywheel-product__ai-build-skills/security ~/.claude/skills/security # Claude Code
cp -R /tmp/flywheel-product__ai-build-skills/security ~/.agents/skills/security # Codex, Cursor, Gemini CLI, Copilot, OpenCode