Freelance Dev Kit: From Launch Audit to Post-Launch Changes
Two skills for freelancers and small studios who build websites and web apps for clients.
Before launch: Next.js + Supabase + Vercel Audit reads your repo with up to 13 specialist roles and returns ranked findings with file:line evidence and fixes. Paste your Vercel or Supabase usage page and it maps the bill to the code behind it. It is read-only.
After launch: Change Request Triage splits the client's list of small changes into warranty fixes, paid changes and unclear items. Every verdict quotes the exact clause from your contract, and paid items get an hour estimate.
The step before both, Website Estimate Questions, is free on my profile: it turns a vague brief into ten questions or fewer before you quote.
The audit is built for Next.js + Supabase + Vercel. Change Request Triage works with any stack or platform.
Works with every agent that reads SKILL.md — Claude Code, Cursor, Codex CLI, Gemini CLI, GitHub Copilot, Windsurf, OpenClaw, and more.
One payment, lifetime access. 2 skills unlock instantly in your library.
What's included
2 skills
Pre-launch security audit for Next.js + Supabase + Vercel: up to 13 review roles return verified findings with file:line evidence, fixes and cost drivers.
Stop scope creep: sort client revisions and change orders into free warranty fixes and paid changes, with your contract quoted and market prices linked.
See it in action
Next.js + Supabase + Vercel Audit: Code, QA and Costs
Example session with this skill installed
Audit ~/projects/tidepool, full mode. Here's my Vercel usage for the last 30 days: Image Optimization - Transformations 41,880 / 5,000 included, Function Invocations 212K, Fast Data Transfer 38 GB.
- Read your context and instructions
- Compiled the next js
Full mode on tidepool (Next.js 15.3.2, App Router, 15 source files). 12 roles ran as parallel subagents; skipped qa-regression: no previous report.
critical 3 | high 7 | medium 17 | low 10 · verification: 37 of 37 re-checked in a clean context, 37 confirmed, 0 dropped.
Top 5 of 10
- SEC-1 | critical | OpenAI key in a NEXT_PUBLIC_ var | S | rotate the key, move the call to an authenticated server action
- SEC-2 | critical | deleteEntry without auth, via service role | XS | getUser() + author_id filter, drop the admin client
- DB-1 | critical | invoices table without RLS | S | enable RLS + owner-scoped select policy
- SEC-5 | high | cron route without CRON_SECRET | XS | Bearer CRON_SECRET check, 401 otherwise
- FV-1 | high | image optimizer open to any host | XS | restrict remotePatterns to the storage host and path
Usage mapping: 41,880 transformations come from FV-1, the open hostname (next.config.ts:6), and FV-2, two formats x 11 widths (next.config.ts:8-9). Biggest lever: lock remotePatterns, then one format. Current prices: see the Vercel pricing page.
Example finding
DB-1 | critical | invoices table has no row level security
- location: supabase/migrations/20260815120000_billing.sql:1
- evidence:
create table public.invoices ( - why it matters: anyone holding the public anon key can read every invoice (customer_email, amounts) through the REST API
- fix:
alter table public.invoices enable row level security;plus a select policy scoped to the workspace owner - effort: S · confidence: confirmed · roles: database, security
Files: audit-reports/audit-tidepool-2026-10-09-1730.md and .html, next to the repo.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs these skills for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every skill in this bundle passes our trust checks.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back