🚦 Pre-Launch Safety Check

What it does

The Pre-Launch Safety Check is a specialized audit tool designed to catch the "silent killers" of a new product launch: leaked API keys, unprotected databases, and accidental debug modes. It performs a local, read-only scan of your codebase to identify critical security oversights before they reach production.

Why use this skill

While generic AI prompts might miss subtle configuration errors, this skill uses a structured scanner to cross-reference your code against a database of known security anti-patterns. It translates complex vulnerabilities into "founder-friendly" English, explaining exactly what the risk is and providing the specific remediation steps needed to fix it without breaking your app.

Supported checks

• Hardcoded secrets and API keys (Stripe, AWS, OpenAI, etc.).
• Committed environment variables (.env files).
• Publicly accessible database routes and missing auth guards.
• Permissive Row Level Security (RLS) and CORS configurations.
• Production deployments with debug mode enabled.
• Exposed storage buckets and default admin credentials.

The output provides a prioritized list of findings, severity levels, and a manual checklist for items that require a human eye, such as business logic flaws.