More screenshots

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+22 more

    AI App Readiness Coach - Get your App Ready for Real Users

    3

    A 10-point technical audit and coaching framework to verify if AI-generated apps are safe and ready for launch.

    Free

    Security scanned
    AI App Readiness Coach - Get your App Ready for Real Users

    AI App Readiness Coach - Get your App Ready for Real Users

    Example session with this skill installed

    I just built a CRM with Lovable and I'm worried about security. Can you check if it's ready for me to invite my first 50 clients?

    • Read your context and instructions
    • Compiled the ai app readiness

    I will guide you through ten readiness checks for your Lovable app. I have access to web search to check current Lovable documentation and will use a browser to inspect your public pages. I cannot see your private data or code unless you provide it.

    We will start with the two most critical checks regarding data exposure.

    1. Who can see your data?

    This is to ensure one client cannot see another client's records.

    • Test 1 (Logged-out): Open your dashboard link in an Incognito window. You should see a login page, not data.

    Test 2 (Two-account): Create two test accounts (TEST-A and TEST-B). Try to access a TEST-A record link while logged in as TEST-B.

    • Builder Question: Ask your builder: "Is Row Level Security (RLS) enabled on all Supabase tables?"

    Score: Yellow (Pending your test results)

    2. Is a secret showing?

    I have scanned your public scripts at the URL provided.

    • Result: I found a string starting with pk_live_. This is your Stripe Public Key, which is safe to be public.
    • Action: Search your source code for service_role or sk_live. Do not paste them here if found.

    Score: Green

    Current Readiness Scorecard

    CheckStatusNote
    1. Data Visibility🟡 YellowAwaiting two-account test results.
    2. Secret Exposure🟢 GreenNo master keys found in public scripts.
    3. Account Ownership⚪ GrayNot started.
    4. Data Portability⚪ GrayNot started.

    Next steps

    1. Run the "Two-account test" described in Check 1 and tell me if Account B could see Account A's data.
    2. Confirm if you have the login credentials for the GitHub repository and the Supabase dashboard.
    3. Tell me the email addresses used for your Stripe and Domain accounts.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    You have an app built with Lovable, Bolt, v0, or another AI builder, but you aren't sure if it is actually safe to launch. Most AI-generated apps suffer from hidden data leaks, hardcoded secrets, or brittle permissions that non-technical owners miss. This skill provides a structured, developer-led coaching session to audit your application before real users touch it.

    What it does

    • Data security audit guided checks to ensure row-level security is active and users cannot access each other's data.
    • Secret detection scans public code and scripts for exposed Stripe, Supabase, or OpenAI API keys.
    • Ownership verification confirms the owner controls the domain, repository, and billing accounts rather than the freelancer or AI tool.
    • Functional validation tests payment paths, form deliveries, and automated jobs without risking real transactions.
    • Compliance and accessibility checks for privacy policy alignment and basic WCAG keyboard navigation.

    How it works

    1. Identify the stack you provide the AI builder used and the app's public URL to set the audit context.
    2. Execute ten checks the agent guides you through one test at a time, scoring each as Green, Yellow, or Red.
    3. Generate a scorecard the agent compiles a technical table of findings and a launch-readiness assessment.
    4. Draft builder comms it produces a specific list of technical questions or urgent fix requests to send to your developer.

    Frameworks & tools

    Optimized for apps built with Lovable, Base44, Bolt, Replit, v0, and Supabase. It uses browser-based testing patterns and platform-specific documentation.

    Why this beats prompting it yourself

    Generic prompts often miss the specific "gotchas" of AI builders, like unpublishing a site without pausing the database. This skill enforces a strict safety protocol, including specific search strings for leaked secrets and a "two-account" test methodology that reveals broken permissions.

    Use cases

    • Auditing a freelancer's work before final payment.
    • Checking a "v0" or "Lovable" prototype before moving it to production.
    • Responding to a suspected data leak by following the emergency closure steps.

    Known limitations

    Cannot bypass logins or view private databases directly. Requires the owner to perform manual browser actions if no tool access is provided.

    How to use

    Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Free forever

    No account required to browse

    Trust & safety

    Security scanned

    Verified clean 11 days ago

    • Free to download with an account

    Listed11 days ago

    What's inside

    Frequently Asked Questions