@yury.ai: Comment AUDIT and I’ll send you the prompt 👇 5 checks I run before any AI-built app goes live. Keys and passwords: AI often writes them into files or ships them to the browser, so keep them on the server in environment variables. Open database: in Supabase anyone can read a table with no access rules, so turn RLS on for every table. Firebase rules: if access is open to everyone, anyone can read and change your users’ data. Stripe webhooks: without a signature check, anyone can send a fake “payment succeeded”. And endpoints with no login: a page or API without sign-in is open to anyone who finds the address. I have a ready-made prompt that checks all 5 at once and shows where each problem is and how to fix it. Follow @yury.ai #vibecoding #ai #appsecurity #startup #buildinpublic

Yury.ai

Open In TikTok:

Region: AE

Friday 06 November 2026 04:00:10 GMT