Original Summary

Some background. I'm an electrician in Slovakia and I build my own software with Claude Code. I kept seeing posts here and on X about AI built apps that work fine but ship secrets straight to the browser. Keys behind VITE_ or NEXT_PUBLIC_, tokens sitting in the JS bundle, that kind of thing. So I built PreflightX. You paste your live URL, it goes through the public HTML and JavaScript and flags anything that looks like an exposed secret. What it is: a quick first check before or after launch. What it isn't: a full security audit. It only sees what's public, so it won't check your database rules or your backend. Free to scan here: preflightx.io Would really like honest feedback, especially from anyone who shipped with Lovable, Bolt, Cursor or Claude Code. What should it check next?   submitted by   /u/Donchuan1998 [link]   [comments]

  • 情报分类：技术学习与提效
  • 分类依据：内容涉及技术、AI、软件工具或工程实践
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/10/13 04:12:29