Ship-Safe Security Bundle

Find the leaked key, the open Supabase table and the root container before your users do.

Ship-Safe Security Bundle product illustration
Download$29

Vibe Coding Security Audit

Security audit for AI-built apps: exposed API keys, NEXT_PUBLIC secrets, Supabase service_role, open API routes, Stripe webhooks, CORS. Grade + fixes. $29.

View Vibe Coding Security Audit
Download$19

Supabase RLS Checker

Supabase RLS checker for migrations: tables without RLS, using (true) policies, user_metadata, slow auth.uid(), definer views. Fix SQL included. $19.

View Supabase RLS Checker
Download$19

Dockerfile Linter & Best Practices Checker

Dockerfile linter with fixes: non-root user, pinned slim images, secrets in ENV/ARG, apt cache, COPY order, .dockerignore. SARIF + Claude Code skill. $19.

View Dockerfile Linter & Best Practices Checker

What it is

Three pre-launch checks for apps built fast (with Cursor, Claude Code, Lovable, Bolt or by hand), each a local Python tool with a Claude Code skill and CI or pre-commit setup.

FolderWhat it does
plugins/vibe-coding-security-audit/scans the code for the mistakes AI-built apps ship with: secrets in the frontend, open CORS, API routes without auth, unverified webhooks, SQL injection and more; graded A-F
plugins/supabase-rls-checker/checks Supabase migrations for Row Level Security problems before deploy and writes the fix migration
plugins/dockerfile-linter/lints Dockerfiles: root user, unpinned images, secrets in layers, cache-busting order, shell-form CMD; graded A-F
./run_tests.sh   # runs every tool's tests
./demo.sh        # runs each tool on its example project

Bought separately: $29 + $19 + $19 = $67.

What you get

The screenshot is real output from the kit’s own commands. Tested from a fresh download of this exact zip: ./run_tests.sh passed on Python 3.13 and 3.10.

Real terminal output from Ship-Safe Security Bundle: demo and passing tests

Use with Claude Code

/plugin marketplace add ./ship-safe-security-bundle
/plugin install supabase-rls-checker@youraitools-shipsafe

Honest limits

Automated checks find common, known mistakes; they are not a penetration test or a security audit by a person. The limits in each tool's README apply.

Format and license

Zip, 62 KB, v1.0, 62 files. You may use and modify this kit for your own work and for clients you serve, including paid client work. Not affiliated with or endorsed by Vercel, Supabase, Stripe, Docker or any vendor.

FAQ

Are these the same as the single tools?
Yes, the same three tools.
Do they upload my code?
No, everything runs locally.
Is this a security audit?
No, it's automated checks for common mistakes; it doesn't replace a review by a security professional.
How do I get the files?
Pay by card right here on youraitools.co: your download links appear on this page the moment the payment goes through (claim window: 72 hours, up to 5 downloads per 7 days). Need the files re-sent later? Email hello@youraitools.co.
Refunds?
Email hello@youraitools.co within 14 days if it doesn’t work and we can’t fix it.
Can I pay with crypto?
Yes. Pay the same price in USDC or USDT on Base, Ethereum, Arbitrum, Optimism, Polygon or Solana from the "Pay with crypto" button, with no account or KYC. We check the payment on-chain and show your download links as soon as it confirms.

Get Ship-Safe Security Bundle

3 pre-launch security checks: vibe coding security audit, Supabase RLS checker, Dockerfile linter. Local, CI-ready, Claude Code skills. $45 ($67 separately).

$45 one-time ($67 separately)

Buy and downloadPay with crypto

Pairs well with

DownloadFree

GitHub Actions Security Checker (Free)

Free GitHub Actions security checker: script injection, pull_request_target, unpinned actions, token permissions and secrets, with fixes. Offline, SARIF.

View GitHub Actions Security Checker (Free)
DownloadFree

Free Schema Markup Validator

Free schema markup validator: check JSON-LD against Google's rich result rules, spot retired FAQ and HowTo markup, bad prices and dates. Files, folders or URLs.

View Free Schema Markup Validator
DownloadFree

Postgres Health Check (Free)

Free read-only Postgres health check: invalid indexes, wraparound, sequences near limit, missing FK indexes, duplicate indexes and more. Markdown or JSON.

View Postgres Health Check (Free)

Related

1 email a week: new x402 + MCP tools and free kits.

Short weekly digest of new x402 + MCP tools and free kits, including the MCP OAuth Checker. No spam, unsubscribe any time.