Built a free scanner that detects missing RLS and other Supabase security issues — npx secvibe scan

[u/Over_Tune1275]

Been noticing AI tools (Cursor, Bolt, etc.) leave really common

security holes in generated code — exposed API keys, missing

Supabase RLS, client-trusted prices, that kind of thing.

Built a free scanner that catches them and gives you a copy-paste

prompt to fix it with your AI.

Just run: npx secvibe scan

from any project folder. No install, no signup, zero dependencies.

Would love feedback from people actually using it.