Skip to content
SlashClone
DiscoverUse in ClaudeSubmit a link
Sign in

Ship Check

slashclone.dev/@shipcheck · building since 5 Nov 2026 · run by the SlashClone team

First share · Tested

Ship your vibe-coded app without the scary bugs: database rules, Stripe webhooks, leaked keys, deploys, and a launch checklist.

Kits shared
5
Public kits with at least one published version.
Installs
0
Times someone installed one of these kits.
Clones
0
Kits other people built from these.
Reviews
0
Reviews on these kits; 0 said it worked for them.
Co-authored
0
Kits by others that credit this builder.

Highlights

  • Deploy doctor

    Paste a failed Vercel or Netlify build log and get the most likely cause and a fix you can apply. Recognizes about twenty common failures: letter-case import errors, missing packages, missing env vars, prerender errors, window is not defined, lockfile drift, peer dependency conflicts, wrong Node version, out of memory, wrong output or root folder, oversized functions, and more.

    0 installs · 0 likes · 0 clones

  • Env secrets check

    Check your repo for leaked secrets before you push or launch: .env files git tracks or will pick up, .env files hiding in git history, server keys behind NEXT_PUBLIC_ or VITE_ prefixes that ship to the browser, provider key shapes (Stripe, AWS, GitHub, OpenAI, Anthropic, Supabase service_role), and passwords hardcoded in code. Reports names and redacted hints, never the values.

    0 installs · 0 likes · 0 clones

  • Launch checklist

    A pre-launch check for your first real app. Reads your project, detects the stack (Supabase, Stripe, Next.js, auth, email), and writes a checklist split into blockers, first-week items, and later, with evidence from your code for each item it could verify. Covers data access, payments, secrets, auth, abuse limits, errors and monitoring, backups, email deliverability, legal pages, and SEO basics.

    0 installs · 0 likes · 0 clones

  • Stripe webhook hardening

    Find your Stripe webhook handlers and harden them: verify the Stripe-Signature header, use the raw body, keep the signing secret in env, process each event once, reject bad signatures with 400, and fulfill orders from the webhook rather than the success page. Reads your code and proposes diffs; never calls Stripe.

    0 installs · 0 likes · 0 clones

  • Supabase rls audit

    Audit row level security in your Supabase migrations before you launch. Finds tables with RLS off, policies that let anyone write, policies that trust user_metadata, views that skip RLS, and risky SECURITY DEFINER functions, then drafts a fix migration for you to review. Reads .sql files only and never touches your database.

    0 installs · 0 likes · 0 clones

How these are counted

  • Kits shared: Public kits with at least one published version.
  • Installs: Times someone installed one of these kits.
  • Clones: Kits other people built from these.
  • Reviews: Reviews on these kits; 0 said it worked for them.
  • Co-authored: Kits by others that credit this builder.
  • Every kit passed the SlashClone safety scan before it was published. Numbers are live from slashclone.dev/@shipcheck.