More screenshots
Works with the AI tools you already use
🚦 Pre-Launch Safety Check
Check your app for the security mistakes that leak data before you launch, explained in plain English. Flags API keys and secrets sitting in your code, a committed .env file, data with no login protecting it, database tables anyone can read, debug mode left on, wide-open sharing (CORS), hardcoded admin passwords, and public storage buckets. Built for non-technical founders shipping AI-built apps: every finding tells you what is wrong, why it matters, and how to fix it.
$13
· or 65 creditsSecure checkout via Stripe
About this skill
What it does
The Pre-Launch Safety Check is a specialized audit tool designed to catch the "silent killers" of a new product launch: leaked API keys, unprotected databases, and accidental debug modes. It performs a local, read-only scan of your codebase to identify critical security oversights before they reach production.
Why use this skill
While generic AI prompts might miss subtle configuration errors, this skill uses a structured scanner to cross-reference your code against a database of known security anti-patterns. It translates complex vulnerabilities into "founder-friendly" English, explaining exactly what the risk is and providing the specific remediation steps needed to fix it without breaking your app.
Supported checks
- Hardcoded secrets and API keys (Stripe, AWS, OpenAI, etc.).
- Committed environment variables (.env files).
- Publicly accessible database routes and missing auth guards.
- Permissive Row Level Security (RLS) and CORS configurations.
- Production deployments with debug mode enabled.
- Exposed storage buckets and default admin credentials.
The output provides a prioritized list of findings, severity levels, and a manual checklist for items that require a human eye, such as business logic flaws.
Details
How to install
Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.
Reviews
No reviews yet - be the first to share your experience.
Only users who have downloaded or purchased this skill can leave a review.
Be the first to review this skill.
Only users who have downloaded or purchased this skill can leave a review.
Security Scanned
Passed automated security review
Permissions
Allowed Hosts
File Scopes
Read-only. The patterns it checks load from an editable references/safety-rules.json, and every rule has a plain-language write-up in references/explanations.md. It reads no environment variables and writes nothing.
Creator
JustHandled Labs builds focused agent skills for the work nobody wants to do by hand. Each one is a single repeatable job done well: catching the security and data mistakes that quietly ship, keeping docs and tests honest, gating the commands an agent is about to run, sharpening writing, and handling the founder chores around launches, outreach, and brand setup. Not generic AI productivity. Specific workflows that are easy to run, review, and repeat. Maintained by H.J. Westerfield, with a background in communications, editing, project coordination, customer support, and practical AI systems. Tools for people who want useful automation without theatrical complexity.
Also available in a bundle
Frequently Asked Questions
Browse More Skills
Bounty Security Pattern Master Library — 399 Vulnerability Patterns
A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.
code-reviewer
Reviews your code for bugs, security vulnerabilities, logic errors, performance issues, and style violations. Organizes findings by severity and suggests fixes with code examples.
humanize-writing
Transform robotic AI drafts into natural, human-sounding prose with native-level flow and tone.
frontend-motion-wizard
Advanced responsive layout and interactive micro-interaction engine for React, Tailwind CSS, and Framer Motion. Automatically injects fluid element states, mobile-first touch behaviors, adaptive viewports, and non-destructive layout transitions into static codebases