Analysis updated 2026-05-18
Check whether an app built with Lovable, Bolt, or v0 is safe to launch.
Find security issues like disabled row level security or exposed secret keys.
Get a prioritized, copy-paste fix list before shipping to real users.
Verify backups, rollback plans, and error monitoring actually work.
| wunderlandmedia/launchworthy | 8bit64k/cronalytics | alibaba-damo-academy/rynnworld-4d | |
|---|---|---|---|
| Stars | 69 | 69 | 69 |
| Language | Python | Python | Python |
| Setup difficulty | easy | easy | — |
| Complexity | 2/5 | 2/5 | — |
| Audience | vibe coder | ops devops | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires Claude Code installed, the plugin adds via two commands, then you just ask in plain English for an audit.
launchworthy is a Claude Code skill built for people who used an AI tool like Lovable, Bolt, v0, Cursor, or Claude Code itself to build an app, and now want to know if it is actually safe to put in front of real users. Instead of just chatting with an AI and asking it to review your code, this tool runs a structured audit across five specific areas and produces a scored report along with a prioritized list of fixes, each pointing to exact file paths with code you can copy and paste. The five areas it checks are frontend and user experience, backend and data handling, authentication and security, infrastructure and deployment, and operations and recovery. Concretely, this covers things like broken loading states, a database with row level security accidentally turned off, secret keys exposed in the browser bundle, missing backups, and whether you could actually recover if something went wrong. The tool automatically figures out what framework and backend you are using, among options like Next.js, SvelteKit, Astro, Supabase, and Firebase, and adjusts its checks to match. What makes this different from just asking an AI to review your code is that it refuses to mark something as safe unless it can actually verify it. Anything it cannot check itself is labeled as needing manual verification rather than being assumed fine, and if you insist something is okay without proof, it records that as unverified rather than turning the item green. It also pushes back on common excuses like calling something "just an MVP," since those are exactly the situations that tend to lead to real security problems. Getting started involves installing Claude Code, then adding this project as a plugin with two simple commands, after which you can simply ask in plain English whether your app is production ready. It then runs the audit and writes a scored report you can act on. The project is released under the MIT license and works across many different app stacks rather than being tied to one specific framework.
A Claude Code skill that audits AI-built apps across five domains and produces a scored, copy-paste ready fix list before launch.
Mainly Python. The stack also includes Python, Claude Code, Next.js.
Use freely for any purpose, including commercial use, as long as you keep the copyright notice, per the MIT license.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly vibe coder.
This repo across BitVibe Labs
Verify against the repo before relying on details.