First aid station

Check your app yourself. Free.

Paste my prompt into Lovable, Cursor, Claude Code or whatever you built with. It makes your AI look for eight problems that show up again and again in beginners’ apps, and explain them in plain English.

What it checks

1. Pages, API routes, server actions or functions that work without logging in
2. Places where one user can read or change another user's data, including every row level security policy
3. Secret keys, passwords or tokens in the code, in variables starting with VITE_ or NEXT_PUBLIC_, or in the git history
4. Prices, plans, credits or limits that are decided in the browser instead of on the server
5. Payment webhooks that do not verify the signature
6. User input that reaches the database or another service without being checked
7. Errors that are caught and then ignored
8. Packages that are outdated, deprecated or do not exist on npm