{
  "id": "prelaunch-security-check",
  "title": "Pre-launch security check for a vibe-coded app",
  "category": "vibe-coding",
  "job": "Catch leaked keys, missing auth and open database tables before you launch.",
  "difficulty": "Intermediate",
  "tools": [
    {
      "id": "claude-code",
      "name": "Claude Code",
      "url": "https://claude.com/product/claude-code",
      "kind": "coding-agent",
      "summary": "Anthropic's agentic coding tool for the terminal and IDEs. Included in paid Claude plans.",
      "open_source": false,
      "pricing": {
        "plans": [
          {
            "name": "Pro",
            "usd_month": 20,
            "note": "$17/mo billed yearly; 5-hour and weekly usage limits"
          },
          {
            "name": "Max 5x",
            "usd_month": 100,
            "note": "5x Pro usage per session"
          },
          {
            "name": "Max 20x",
            "usd_month": 200,
            "note": "20x Pro usage per session"
          }
        ],
        "source": "https://claude.com/pricing?mode=code",
        "status": "verified",
        "notes": "Free Claude plan does not include Claude Code."
      },
      "last_checked": "2026-10-21"
    },
    {
      "id": "supabase",
      "name": "Supabase",
      "url": "https://supabase.com",
      "kind": "backend",
      "summary": "Postgres database with auth, storage, edge functions and an official MCP server.",
      "open_source": false,
      "pricing": {
        "plans": [
          {
            "name": "Free",
            "usd_month": 0,
            "note": "500 MB DB, 50k MAU, pauses after 1 week inactive"
          },
          {
            "name": "Pro",
            "usd_month": 25,
            "note": "Includes one Micro compute project; usage beyond quotas billed"
          }
        ],
        "source": "https://supabase.com/pricing",
        "status": "verified",
        "notes": null
      },
      "last_checked": "2026-10-21"
    }
  ],
  "model": "Claude Opus 5.5",
  "mcp_servers": [
    "Supabase MCP in read-only mode"
  ],
  "config": {
    "filename": ".mcp.json",
    "language": "json",
    "code": "{\n  \"mcpServers\": {\n    \"supabase\": { \"type\": \"http\", \"url\": \"https://mcp.supabase.com/mcp?project_ref=YOUR_PROJECT_REF&read_only=true\" }\n  }\n}"
  },
  "starter_prompt": "Do a pre-launch security review. Check: secrets in client code or git history, API routes without auth, Supabase tables without RLS or with overly broad policies, missing rate limits, and unvalidated input. Output a table: issue, file, severity, fix. Don't change anything yet.",
  "monthly_cost": {
    "min_usd": 20,
    "max_usd": 20,
    "note": "Claude Pro $20. Supabase MCP read-only access is free."
  },
  "steps": [
    "Connect Supabase MCP with read_only=true.",
    "Run the prompt.",
    "Fix critical issues one at a time, then re-run."
  ],
  "why_this_works": "Most vibe-coded launch incidents are a short list of known mistakes; an agent can check all of them in one pass.",
  "watch_out": "This doesn't replace a professional audit for apps holding sensitive data.",
  "unverified": [],
  "tested": false,
  "last_checked": "2026-10-21"
}