Seaworthy
skill-amirhosein-lotfi-seaworthy-seaworthy · by AmirHosein-Lotfi
Pre-deploy security and secrets gate for AI-built ("vibe-coded") web apps. Scans the repo for the exact disaster pattern behind real 2026 breaches — hardcoded secrets, .env files committed to git history, Supabase Row Level Security disabled or unconfirmed, exposed service-role keys, API/serverless routes with no auth check before a database read or write, wildcard CORS combined with credentials,…