vca-complete

../../accessibility-audit/commands/run.md

../../ai-seo-audit/commands/run.md

Audit REST API patterns - route structure, HTTP methods, status codes, error handling, auth middleware, rate limiting, input validation, pagination, documentation (55+ checks)

../../code-quality/commands/run.md

../../code-review/commands/run.md

../../codebase-setup/commands/codebase-cleanup.md

../../codebase-setup/commands/config-driven.md

../../codebase-setup/commands/feature.md

../../codebase-setup/commands/health-check.md

../../codebase-setup/commands/init.md

../../codebase-setup/commands/lovable-migrate.md

../../codebase-setup/commands/naming-check.md

../../codebase-stability-audit/commands/run.md

../../debugger/commands/run.md

Pre-deployment readiness checklist - build config, env vars, security headers, error handling, database, DNS/SSL, CI/CD, performance, dependencies (60+ checks)

../../docs-generator/commands/run.md

Audit environment variable configuration - secret leaks, .env drift, hardcoded credentials, missing variables, deployment readiness (50+ checks)

../../frontend-audit/commands/run.md

../../market-analysis/commands/run.md

../../mcp-audit/commands/quick.md

../../mcp-audit/commands/run.md

../../mvp-builder/commands/run.md

../../performance-audit/commands/run.md

../../project-standards/commands/audit.md

../../project-standards/commands/fix.md

../../refactorer/commands/run.md

../../security-audit/commands/fix-review.md

../../security-audit/commands/run.md

../../security-audit/commands/sharp-edges.md

../../supabase-toolkit/commands/auth-setup.md

../../supabase-toolkit/commands/generate-rls.md

../../supabase-toolkit/commands/generate-rpc.md

../../supabase-toolkit/commands/migration-lint.md

../../supabase-toolkit/commands/rls-audit.md

../../supabase-toolkit/commands/schema-usage-audit.md

Generate unit and integration tests - detect framework, find untested files, scaffold tests with meaningful assertions. Supports Vitest, Jest, React Testing Library

Audit REST API patterns and best practices for Express, Next.js API routes, and Fastify applications. Checks route naming conventions, HTTP method usage, status codes, error response format, authentication middleware, rate limiting, input validation (Zod/Joi), API versioning, pagination patterns, CORS configuration, request/response logging, and OpenAPI/Swagger documentation. Use when reviewing API endpoints, checking REST conventions, auditing backend routes, or validating API design. Triggers on "api audit", "REST API review", "endpoint validation", "route patterns", "API best practices", "backend audit".

Pre-deployment readiness audit for web applications. Checks build configuration, environment variables, security headers, error handling, database migrations, DNS/SSL setup, monitoring/logging, CI/CD pipeline, performance budgets, rollback strategy, and dependency vulnerabilities. Use when preparing to deploy, before going live, pre-launch review, release checklist, or production readiness check. Triggers on "deploy ready", "pre-deploy", "go live checklist", "launch readiness", "production checklist", "deploy audit", "release check".

Audit environment variable security and configuration. Detects leaked secrets in git history, .env files missing from .gitignore, hardcoded credentials in source code, .env vs .env.example drift, insecure default values, and missing required variables. Use when reviewing env configuration, checking for secret leaks, auditing dotenv setup, or preparing for deployment. Triggers on "env audit", "environment variables", "secret leak", "dotenv check", ".env security", "hardcoded credentials", "env drift".

Generate unit and integration tests for TypeScript/JavaScript projects. Detects testing framework (Vitest, Jest), finds untested files, analyzes function signatures, and generates test scaffolds with meaningful assertions. Use when user asks to "generate tests", "add tests", "create test file", "improve test coverage", "scaffold tests", or "find untested code". Use /test-generator:run to start.