Observed arrival · 2026-11-03
Ship Kit’s last-mile security check
Ship Kit offers runnable checks and fixes for security problems in AI-built apps, including exposed Supabase data and Stripe webhook issues.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Non-technical founders with AI-built apps
- Worth noticing
- The sample check flags a Stripe webhook that accepts a fake “payment succeeded” event and gives a 10/100 score on a deliberately broken demo app.
Field notes
The sample command-line report names specific files and tables, including a Stripe secret in client-side code and readable “profiles” and “orders” tables. It also distinguishes checks the free version omits, such as whether strangers can change or delete data. The page says the full kit covers those additional cases and includes an undo mechanism; those capabilities are presented as product claims.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue