skills/git-trace/SKILL.md
Look up vibe-kit git history without needing to know git. Find which commit added a feature, changed a file, or ran during which phase. Reads the strict format written by `git-auto-commit` (type(scope): subject [P<n>]). Vietnamese trigger phrases: "xem lich su", "ai sua cai nay", "khi nao them", "commit nao lam hong", "tra lai phase".
npx skillsauth add Hikkywannafly/vibe-kit git-traceInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Non-dev users should be able to ask "khi nào thêm trang đăng nhập?" or "commit nào làm hỏng checkout?" and get a straight answer. This skill wraps common git log / git blame queries behind a single interface and translates SHAs into plain prose in the user's input language (Vietnamese by default for VN users).
Detect what the user gave:
| Input shape | Example | Query |
|-------------|---------|-------|
| Scope name | auth, shop, checkout | git log --grep="($scope)" |
| Phase tag | P2, P5, phase 3 | git log --grep="\[P$n\]" |
| File path | app/login/page.tsx | git log --follow -- <file> |
| Feature slug | tiktok-shop, magic-link | git log --grep="$slug" --all-match |
| SHA | abc1234 | git show --stat <sha> |
| who + file | who app/shop/page.tsx | git blame -L 1,40 <file> |
If ambiguous, ask once in VN: "Tìm theo feature (vd: auth), phase (P2), hay file (app/...)?"
git log --grep="(auth)" --pretty=format:"%h %ad %s" --date=short -20
Output template for user (VN, max 10 dòng):
Lich su thay doi auth:
abc1234 2026-01-15 feat(auth): add magic-link sign-in [P2]
def5678 2026-01-18 fix(auth): handle expired OTP link
9a0b1c2 2026-02-03 refactor(auth): extract middleware helper
git log --grep="\[P2\]" --pretty=format:"%h %s" -30
Also read .vibe/plan.md if it exists, echo the phase description above the commit list so the user remembers what P2 meant.
git log --follow --pretty=format:"%h %an %ad %s" --date=short -- "$file"
For per-line authorship (only when user asks "ai viết dòng X"):
git blame -L <start>,<end> -- "$file"
Run both a subject-grep and a body-grep (user may have written it in either):
git log --grep="tiktok" -i --pretty=format:"%h %ad %s" --date=short
Ask user for the last known-good and last known-broken sha or date, then:
git log --oneline <good>..<broken> -- <path-or-scope>
# Offer `git bisect` only if >10 commits in range.
git reset, git checkout <sha>, git revert from this skill — it is read-only. If user asks to roll back, emit: "Muốn revert commit abc1234? Type /vibe revert abc1234" (future skill, not in this one)..git/ missing: "Project chua co git. Chay /vibe hoac git init truoc."Always print in simple Vietnamese with a short EN header showing the raw command used, so advanced users can re-run it:
$ git log --grep="(checkout)" -10
3 commit lien quan checkout:
abc1234 2026-03-02 feat(checkout): add Polar webhook [P5]
def5678 2026-03-04 fix(checkout): handle retry 409
9a0b1c2 2026-03-09 chore(checkout): log webhook body in dev
/vibe-fix, surface the last 5 commits touching the broken area/vibe-deploy: show commits since last deploy tag (if exists)data-ai
Generate Vietnamese marketing copy, UI strings, CTAs, error messages, and email templates for vibe-kit projects. Tone: friendly, conversational, Southern Vietnamese style. Activated for any user-visible text generation.
development
One-shot orchestrator. Turns the prose after /vibe into a shipped product by clarifying intent, rendering a plan, gating on approval, then spawning planner+researcher+fullstack-dev+tester+reviewer agents in sequence. User-visible strings match the user's input language (Vietnamese by default for VN users). Two modes: SAFE (default — clarify + show plan + wait for approval, max 1 round-trip) and YOLO (skip clarify+approval, run full auto with smart defaults — for demos and power users). YOLO triggers: prose contains `yolo`, `nhanh nha`, `lam luon`, `khoi hoi`, `auto`, or args start with `yolo`. Trigger phrases (EN + VN): "build me a site", "make me a landing page", "create a shop", "I need an app", "vibe lam website", "tao cho toi mot", "xay dung shop online", "lam landing page", "can mot app".
tools
On-demand security audit for vibe-kit projects. Stack-aware checks for Next.js App Router + Supabase + Polar: secrets leak, RLS gaps, service-role key in client bundle, missing webhook signature verification, unprotected API routes, weak headers, dependency vulns. Outputs a Vietnamese P0/P1/P2 report with file:line + fix hints. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "check security", "audit it", "security scan", "is this safe to launch", "kiem tra bao mat", "quet bao mat", "audit du an", "co an toan khong", "scan bao mat truoc khi deploy".
tools
Wire Supabase JS client into a React Native (Expo) vibe-kit project: session persistence via AsyncStorage, magic-link OAuth callback via expo-linking deep links, Realtime subscriptions on RN, and shared TypeScript types with the Next.js webapp twin (vibe-kit's typical web<->mobile pair pattern). This is the mobile counterpart of `auth-magic-link` (web). User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "supabase react native", "supabase mobile", "auth mobile expo", "magic link mobile", "tich hop supabase vao app", "supabase deep link".