- Context
- AI-written code can ship with security, auth, payment and database bugs: exposed RLS, leaked keys and broken auth.
- What I built
- Checks for hard-coded keys
- Checks for unprotected routes
- Webhook signature checks
- Row-Level Security checks
- Input validation, CORS and XSS checks
- An npm package with JSON output and a strict mode for CI
- A GitHub Actions workflow that comments on pull requests
- Outcome
- Live, and open source on GitHub.
Need something similar built, or an existing site fixed? See website services and prices.