Posts about #api-keys

We Teardown AI-Generated Web Apps: The 3 AI-Specific Security Mistakes

An empirical teardown of AI-generated web apps. We looked for the failures that only happen when code is vibed — Supabase RLS gaps, AI API keys shipped to the browser, and login forms generated with insecure defaults. Here's what we found and how to fix each one.