When: scan for vulnerabilities; pre-delivery or periodic security audit of a Next.js + Supabase app · Input: {{project_path}} {{live_url}} {{scope}} {{fix}} {{client_project}} {{jurisdiction}} · Output: evidence-backed findings table + PASS/FAIL · keywords: RLS, secret leaks, CVE, security headers